Bouncy Castle 加密问题漏洞

漏洞信息详情

Bouncy Castle 加密问题漏洞

CNNVD编号：CNNVD-201806-157
危害等级：低危-->
危害等级：低危
CVE编号： CVE-2016-1000346
漏洞类型：加密问题
发布时间： 2018-06-04
威胁类型：远程
更新时间： 2021-10-08
厂商： debian
漏洞来源：

漏洞简介

Bouncy Castle是Bouncy Castle组织的密码学中使用的API集合。它包括适用于Java和C＃编程语言的API 。

Bouncy Castle JCE Provider 1.55及之前版本中存在加密问题漏洞，该漏洞源于程序没有充分的验证DH公钥。目前尚无此漏洞的相关信息，请随时关注CNNVD或厂商公告。

漏洞公告

目前厂商已发布升级补丁以修复漏洞，补丁获取链接：

https://github.com/bcgit/bc-java/commit/1127131c89021612c6eefa26dbe5714c194e7495#diff-d525a20b8acaed791ae2f0f770eb5937

参考网址

来源:REDHAT

链接:https://access.redhat.com/errata/RHSA-2018:2669

来源:UBUNTU

链接:https://usn.ubuntu.com/3727-1/

来源:MLIST

链接:https://lists.debian.org/debian-lts-announce/2018/07/msg00009.html

来源:CONFIRM

链接:https://security.netapp.com/advisory/ntap-20181127-0004/

来源:CONFIRM

链接:https://github.com/bcgit/bc-java/commit/1127131c89021612c6eefa26dbe5714c194e7495#diff-d525a20b8acaed791ae2f0f770eb5937

来源:REDHAT

链接:https://access.redhat.com/errata/RHSA-2018:2927

来源:MISC

链接:https://www.oracle.com/security-alerts/cpuoct2020.html

来源:kb.juniper.net

链接:http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10939

来源:www.ibm.com

链接:https://www.ibm.com/support/pages/node/960296

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-bouncy-castle-affects-apache-solr-shipped-with-ibm-operations-analytics-log-analysis/

来源:www.ibm.com

链接:https://www.ibm.com/support/pages/node/6496733

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2019.3850/

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2020.2340/

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-multiple-bouncy-castle-vulnerabilities-affect-ibm-sterling-b2b-integrator/

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2019.2561/

受影响实体

Debian Debian_linux:8.0

补丁

Bouncy Castle JCE Provider 安全漏洞的修复措施

正文

Bouncy Castle 加密问题漏洞

漏洞信息详情