CVE-2016-1000344

EPSS 0.51%
Published 04.06.2018 21:29:00
Last modified 12.05.2025 17:37:16
Source cve@mitre.org
Teams watchlist Login
Open Login

In the Bouncy Castle JCE Provider version 1.55 and earlier the DHIES implementation allowed the use of ECB mode. This mode is regarded as unsafe and support for it has been removed from the provider.

Affected products Warnungen 0 Metrics 3 CWE 0 References 8

Data is provided by the National Vulnerability Database (NVD)

Bouncycastle ≫ Bc-java Version <= 1.55

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.51%	0.655

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.4	2.2	5.2	CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
nvd@nist.gov	5.8	8.6	4.9	AV:N/AC:M/Au:N/C:P/I:P/A:N

https://access.redhat.com/errata/RHSA-2018:2669

https://access.redhat.com/errata/RHSA-2018:2927

https://www.oracle.com/security-alerts/cpuoct2020.html

https://security.netapp.com/advisory/ntap-20181127-0004/

https://github.com/bcgit/bc-java/commit/9385b0ebd277724b167fe1d1456e3c112112be1f

Patch

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2016-1000344

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2016-1000344

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2016-1000344

EUVD