Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15

2018-10-1818:04:13

Google

osv.dev

0.004 Low

EPSS

Percentile

73.2%

JSON

In the Bouncy Castle JCE Provider version 1.55 and earlier the DHIES/ECIES CBC mode vulnerable to padding oracle attack. For BC 1.55 and older, in an environment where timings can be easily observed, it is possible with enough observations to identify when the decryption is failing due to padding.

CPENameOperatorVersion
org.bouncycastle:bcprov-jdk14eq1.45
org.bouncycastle:bcprov-jdk15eq1.38
org.bouncycastle:bcprov-jdk14eq1.48
org.bouncycastle:bcprov-jdk14eq1.51
org.bouncycastle:bcprov-jdk15eq1.45
org.bouncycastle:bcprov-jdk14eq1.43
org.bouncycastle:bcprov-jdk14eq1.44
org.bouncycastle:bcprov-jdk14eq1.50
org.bouncycastle:bcprov-jdk14eq1.46
org.bouncycastle:bcprov-jdk15eq1.43

Name	Operator	Version
org.bouncycastle:bcprov-jdk14	eq	1.45
org.bouncycastle:bcprov-jdk15	eq	1.38
org.bouncycastle:bcprov-jdk14	eq	1.48
org.bouncycastle:bcprov-jdk14	eq	1.51
org.bouncycastle:bcprov-jdk15	eq	1.45
org.bouncycastle:bcprov-jdk14	eq	1.43
org.bouncycastle:bcprov-jdk14	eq	1.44
org.bouncycastle:bcprov-jdk14	eq	1.50
org.bouncycastle:bcprov-jdk14	eq	1.46
org.bouncycastle:bcprov-jdk15	eq	1.43