BouncyCastle TLS prior to version 1.0.3, when configured to use the JCE (Java Cryptography Extension) for cryptographic functions, provides a weak Bleichenbacher oracle when any TLS cipher suite using RSA key exchange is negotiated. An attacker can recover the private key from a vulnerable application. This vulnerability is referred to as "ROBOT."
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Aruba Aos Cx | — | Upgrade Aruba AOS-CX to a fixed version | Feb 24, 2025 | Feb 22, 2022 |
| Debian | — | Upgrade bouncycastle | Dec 22, 2017 | Dec 12, 2017 |
| Freebsd | — | Upgrade bouncycastle15Upgrade bouncycastle | Dec 31, 2017 | Dec 29, 2017 |
| Oracle Solaris | — | Upgrade runtime/erlang to version 21.0-11.4.6.0.1.1.0 on Solaris 11.4Upgrade runtime/erlang/documentation to version 21.0-11.4.6.0.1.1.0 on Solaris 11.4 | Feb 20, 2019 | Dec 12, 2017 |
| Suse | — | Upgrade bouncycastleUpgrade bouncycastle-javadocUpgrade bouncycastle-pg | Jun 16, 2018 | Dec 12, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub