PT-2018-4641

CVE-2016-1000352

·

تاريخ النشر

2018-06-04

·

تاريخ التحديث

2024-06-15

الوصف من

CVSS 3.1
7.4
عالية
المقاييسAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions Bouncy Castle JCE Provider versions 1.55 and earlier
Description The issue concerns the use of ECB mode in the ECIES implementation, which is considered unsafe. Support for this mode has been removed due to its unsafe nature.
Recommendations For Bouncy Castle JCE Provider versions 1.55 and earlier, consider updating to a version where ECB mode support has been removed to mitigate the risk.
قابلية الاستغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
GHSA-W285-WF9Q-5W69
MGASA-2018-0376
OPENSUSE-SU-2018_1689-1
OPENSUSE-SU-2024:10661-1
RHSA-2018:2927
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾