Junglewise Threat Intelligence
CVE-2016-1000343: In Bouncy Castle JCE Provider the DSA key pair generator generates a weak private key if used with default values
CVE-2016-1000343 · Severity: low · CVSS 3 · Published 2018-10-17
Technologies: org.bouncycastle:bcprov-jdk14 (Maven), org.bouncycastle:bcprov-jdk15on (Maven), org.bouncycastle:bcprov-jdk15 (Maven). Vendors: Maven.
Executive brief
In Bouncy Castle JCE Provider the DSA key pair generator generates a weak private key if used with default values
Affected products
- Maven org.bouncycastle:bcprov-jdk14
- Maven org.bouncycastle:bcprov-jdk15on
- Maven org.bouncycastle:bcprov-jdk15