The Legion of the Bouncy Castle Java Cryptography API before release 1.38, as used in Crypto Provider Package before 1.36, has unknown impact and remote attack vectors related to "a Bleichenbacher vulnerability in simple RSA CMS signatures without signed attributes."
Metrics
Affected Vendors & Products
Advisories
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2022-4466 | The Legion of the Bouncy Castle Java Cryptography API before release 1.38, as used in Crypto Provider Package before 1.36, has unknown impact and remote attack vectors related to "a Bleichenbacher vulnerability in simple RSA CMS signatures without signed attributes." |
Github GHSA |
GHSA-m26p-m559-g5j5 | Legion of the Bouncy Castle Java Cryptography API Bleichenbacher Oracle Vulnerability |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Wed, 28 May 2025 14:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| References |
Thu, 22 May 2025 04:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| References |
Mon, 12 May 2025 18:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Bouncycastle bc-java
|
|
| CPEs | cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.01:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.02:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.03:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.04:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.05:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.06:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.07:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.08:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.09:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.10:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.11:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.12:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.13:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.14:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.15:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.16:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.17:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.18:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.19:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.20:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.21:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.22:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.23:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.24:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.25:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.26:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.27:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.28:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.29:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.30:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.31:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.32:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.33:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.34:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.35:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.36:*:*:*:*:*:*:* |
cpe:2.3:a:bouncycastle:bc-java:*:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.01:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.02:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.03:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.04:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.05:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.06:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.07:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.08:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.09:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.10:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.11:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.12:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.13:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.14:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.15:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.16:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.17:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.18:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.19:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.20:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.21:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.22:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.23:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.24:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.25:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.26:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.27:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.28:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.29:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.30:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.31:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.32:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.33:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.34:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.35:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.36:*:*:*:*:*:*:* |
| Vendors & Products |
Bouncycastle legion-of-the-bouncy-castle-java-crytography-api
|
Bouncycastle bc-java
|
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-07T16:18:20.431Z
Reserved: 2009-03-29T00:00:00
Link: CVE-2007-6721
No data.
Status : Deferred
Published: 2009-03-30T01:30:00.217
Modified: 2025-05-12T17:37:16.527
Link: CVE-2007-6721
OpenCVE Enrichment
No data.
Weaknesses
EUVD
Github GHSA