正文

OpenBSD和Bouncy Castle BC 安全漏洞

admin
admin V管理员 /0 评论 /7 阅读
0302
此篇文章发布距今已超过1152天，您需要注意文章的内容或图片是否可用！

漏洞信息详情

OpenBSD和Bouncy Castle BC 安全漏洞

  • CNNVD编号：CNNVD-202012-1340
    • <!--
  • 危害等级： 高危-->
  • 危害等级： 高危
  • CVE编号： CVE-2020-28052
  • 漏洞类型： 其他
  • 发布时间： 2020-12-18
  • 威胁类型： 远程
  • 更新时间： 2021-11-25
  • 厂        商：
  • 漏洞来源： Red Hat

漏洞简介

OpenBSD是加拿大Openbsd项目组的一套跨平台的、基于BSD的类UNIX操作系统。Bouncy Castle BC是Bouncy Castle组织的一个用于C＃和Java应用程序的加密库。

OpenBSD和Bouncy Castle BC 中存在安全漏洞。目前尚无此漏洞的相关信息，请随时关注CNNVD或厂商公告。以下产品及版本受到影响：

漏洞公告

目前厂商已发布升级补丁以修复漏洞，补丁获取链接：

https://www.bouncycastle.org/releasenotes.html

参考网址

来源:MLIST

链接:https://lists.apache.org/thread.html/rc9e441c1576bdc4375d32526d5cf457226928e9c87b9f54ded26271c@%3Cissues.karaf.apache.org%3E

来源:MLIST

链接:https://lists.apache.org/thread.html/rf9abfc0223747a56694825c050cc6b66627a293a32ea926b3de22402@%3Cissues.karaf.apache.org%3E

来源:MLIST

链接:https://lists.apache.org/thread.html/rfc0db1f3c375087e69a239f9284ded72d04fbb55849eadde58fa9dc2@%3Cissues.karaf.apache.org%3E

来源:MLIST

链接:https://lists.apache.org/thread.html/r30a139c165b3da6e0d5536434ab1550534011b1fdfcd2f5d95892c5b@%3Cissues.karaf.apache.org%3E

来源:MISC

链接:https://www.bouncycastle.org/releasenotes.html

来源:MLIST

链接:https://lists.apache.org/thread.html/r954d80fd18e9dafef6e813963eb7e08c228151c2b6268ecd63b35d1f@%3Ccommits.druid.apache.org%3E

来源:MLIST

链接:https://lists.apache.org/thread.html/r77af3ac7c3bfbd5454546e13faf7aec21d627bdcf36c9ca240436b94@%3Cissues.karaf.apache.org%3E

来源:MLIST

链接:https://lists.apache.org/thread.html/r2ddabd06d94b60cfb0141e4abb23201c628ab925e30742f61a04d013@%3Cissues.karaf.apache.org%3E

来源:MISC

链接:https://github.com/bcgit/bc-java/wiki/CVE-2020-28052

来源:MLIST

链接:https://lists.apache.org/thread.html/rcd37d9214b08067a2e8f2b5b4fd123a1f8cb6008698d11ef44028c21@%3Cissues.karaf.apache.org%3E

来源:MLIST

链接:https://lists.apache.org/thread.html/r167dbc42ef7c59802c2ca1ac14735ef9cf687c25208229993d6206fe@%3Cissues.karaf.apache.org%3E

来源:MISC

链接:https://www.synopsys.com/blogs/software-security/cve-2020-28052-bouncy-castle/

来源:MLIST

链接:https://lists.apache.org/thread.html/r25d53acd06f29244b8a103781b0339c5e7efee9099a4d52f0c230e4a@%3Ccommits.druid.apache.org%3E

来源:MLIST

链接:https://lists.apache.org/thread.html/rdfd2901b8b697a3f6e2c9c6ecc688fd90d7f881937affb5144d61d6e@%3Ccommits.druid.apache.org%3E

来源:MLIST

链接:https://lists.apache.org/thread.html/r8c36ba34e80e05eecb1f80071cc834d705616f315b634ec0c7d8f42e@%3Cissues.solr.apache.org%3E

来源:N/A

链接:https://www.oracle.com//security-alerts/cpujul2021.html

来源:MLIST

链接:https://lists.apache.org/thread.html/rddd2237b8636a48d573869006ee809262525efb2b6ffa6eff50d2a2d@%3Cjira.kafka.apache.org%3E

来源:MLIST

链接:https://lists.apache.org/thread.html/r37d332c0bf772f4982d1fdeeb2f88dd71dab6451213e69e43734eadc@%3Ccommits.pulsar.apache.org%3E

来源:MLIST

链接:https://lists.apache.org/thread.html/rdcbad6d8ce72c79827ed8c635f9a62dd919bb21c94a0b64cab2efc31@%3Cissues.karaf.apache.org%3E

来源:MLIST

链接:https://lists.apache.org/thread.html/r4e1619cfefcd031fac62064a3858f5c9229eef907bd5d8ef14c594fc@%3Cissues.karaf.apache.org%3E

来源:MLIST

链接:https://lists.apache.org/thread.html/r175f5a25d100dbe2b1bd3459b3ce882a84c3ff91b120ed4ff2d57b53@%3Ccommits.pulsar.apache.org%3E

来源:MISC

链接:https://www.oracle.com/security-alerts/cpuApr2021.html

来源:www.oracle.com

链接:https://www.oracle.com/security-alerts/cpuapr2021.html

来源:www.oracle.com

链接:https://www.oracle.com/security-alerts/cpuoct2021.html

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.2416

来源:vigilance.fr

链接:https://vigilance.fr/vulnerability/Bouncy-Castle-privilege-escalation-via-OpenBSDBCrypt-checkPassword-34167

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/163517/Red-Hat-Security-Advisory-2021-2755-01.html

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.2816

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.1924

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/162348/Red-Hat-Security-Advisory-2021-1401-01.html

来源:www.cybersecurity-help.cz

链接:https://www.cybersecurity-help.cz/vdb/SB2021042315

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/161821/Red-Hat-Security-Advisory-2021-0885-01.html

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.1431

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/162926/Red-Hat-Security-Advisory-2021-2210-01.html

来源:www.oracle.com

链接:https://www.oracle.com/security-alerts/cpujul2021.html

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/165052/Red-Hat-Security-Advisory-2021-4767-01.html

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/161935/Red-Hat-Security-Advisory-2021-0974-01.html

来源:www.cybersecurity-help.cz

链接:https://www.cybersecurity-help.cz/vdb/SB2021042112

来源:www.cybersecurity-help.cz

链接:https://www.cybersecurity-help.cz/vdb/SB2021050607

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/161824/Red-Hat-Security-Advisory-2021-0874-01.html

来源:www.cybersecurity-help.cz

链接:https://www.cybersecurity-help.cz/vdb/SB2021072750

来源:www.cybersecurity-help.cz

链接:https://www.cybersecurity-help.cz/vdb/SB2021042618

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.0922

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/163872/Red-Hat-Security-Advisory-2021-3205-01.html

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.3984

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.2731

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.1001

受影响实体

    暂无


补丁

  • Bouncy Castle BC For Java 安全漏洞的修复措施
    <!--
    2020-12-18
    -->