Description
The Legion of the Bouncy Castle Java Cryptography API before release 1.38, as used in Crypto Provider Package before 1.36, has unknown impact and remote attack vectors related to "a Bleichenbacher vulnerability in simple RSA CMS signatures without signed attributes."
No analysis available yet.
Remediation
No remediation available yet.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2022-4466 | The Legion of the Bouncy Castle Java Cryptography API before release 1.38, as used in Crypto Provider Package before 1.36, has unknown impact and remote attack vectors related to "a Bleichenbacher vulnerability in simple RSA CMS signatures without signed attributes." |
Github GHSA |
GHSA-m26p-m559-g5j5 | Legion of the Bouncy Castle Java Cryptography API Bleichenbacher Oracle Vulnerability |
References
History
Wed, 28 May 2025 14:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| References |
Thu, 22 May 2025 04:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| References |
Mon, 12 May 2025 18:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Bouncycastle bc-java
|
|
| CPEs | cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.01:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.02:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.03:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.04:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.05:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.06:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.07:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.08:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.09:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.10:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.11:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.12:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.13:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.14:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.15:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.16:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.17:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.18:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.19:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.20:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.21:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.22:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.23:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.24:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.25:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.26:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.27:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.28:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.29:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.30:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.31:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.32:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.33:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.34:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.35:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.36:*:*:*:*:*:*:* |
cpe:2.3:a:bouncycastle:bc-java:*:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.01:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.02:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.03:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.04:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.05:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.06:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.07:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.08:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.09:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.10:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.11:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.12:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.13:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.14:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.15:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.16:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.17:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.18:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.19:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.20:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.21:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.22:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.23:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.24:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.25:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.26:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.27:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.28:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.29:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.30:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.31:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.32:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.33:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.34:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.35:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.36:*:*:*:*:*:*:* |
| Vendors & Products |
Bouncycastle legion-of-the-bouncy-castle-java-crytography-api
|
Bouncycastle bc-java
|
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-07T16:18:20.431Z
Reserved: 2009-03-29T00:00:00.000Z
Link: CVE-2007-6721
No data.
Status : Deferred
Published: 2009-03-30T01:30:00.217
Modified: 2025-05-12T17:37:16.527
Link: CVE-2007-6721
OpenCVE Enrichment
No data.
Weaknesses
EUVD
Github GHSA