PT-2018-4638 · Bouncy Castle+2 · Bouncy Castle Jce Provider+2
CVE-2016-1000344
·
Publicado
2018-06-04
·
Atualizado
2025-05-12
CVSS v3.1
7.4
Alta
| Vetor | AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
Bouncy Castle JCE Provider versions 1.55 and earlier
Description
The issue concerns the use of ECB mode in the DHIES implementation, which is considered unsafe. Support for this mode has been removed from the provider.
Recommendations
For Bouncy Castle JCE Provider versions 1.55 and earlier, update to a version that no longer supports ECB mode in the DHIES implementation to resolve the issue.
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Bouncy Castle Jce Provider
Jira
Suse