CVE-2016-1000344

EPSS 0.51%
Veröffentlicht 04.06.2018 21:29:00
Zuletzt bearbeitet 12.05.2025 17:37:16
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

In the Bouncy Castle JCE Provider version 1.55 and earlier the DHIES implementation allowed the use of ECB mode. This mode is regarded as unsafe and support for it has been removed from the provider.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 0 Referenzen 8

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Bouncycastle ≫ Bc-java Version <= 1.55

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.51%	0.655

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.4	2.2	5.2	CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
nvd@nist.gov	5.8	8.6	4.9	AV:N/AC:M/Au:N/C:P/I:P/A:N

https://access.redhat.com/errata/RHSA-2018:2669

https://access.redhat.com/errata/RHSA-2018:2927

https://www.oracle.com/security-alerts/cpuoct2020.html

https://security.netapp.com/advisory/ntap-20181127-0004/

https://github.com/bcgit/bc-java/commit/9385b0ebd277724b167fe1d1456e3c112112be1f

Patch

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2016-1000344

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2016-1000344

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2016-1000344

EUVD