Legion Of The Bouncy Castle Bouncycastle Tls vulnerabilities

1 known vulnerability affecting legion_of_the_bouncy_castle/bouncycastle_tls.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2017-13098MEDIUMCVSS 5.9v<1.0.32017-12-13

CVE-2017-13098 [MEDIUM] CWE-203 CVE-2017-13098: BouncyCastle TLS prior to version 1.0.3, when configured to use the JCE (Java Cryptography Extension BouncyCastle TLS prior to version 1.0.3, when configured to use the JCE (Java Cryptography Extension) for cryptographic functions, provides a weak Bleichenbacher oracle when any TLS cipher suite using RSA key exchange is negotiated. An attacker can recover the private key from a vulnerable application. This vulnerability is referred to as "ROBOT."