Executive brief
Observable Discrepancy in BouncyCastle
Affected products
- Maven org.bouncycastle:bcprov-jdk15on
Junglewise Threat Intelligence
CVE-2017-13098: Observable Discrepancy in BouncyCastle
CVE-2017-13098 · Severity: low · CVSS 3 · Published 2022-05-13
Technologies: org.bouncycastle:bcprov-jdk15on (Maven). Vendors: Maven.
Related threats
- Bouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation.
- Bouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack")
- Bouncy Castle Java Cryptography API DNS poisoning in BCJSSE
- Bouncy Castle Denial of Service (DoS)
- Bouncy Castle For Java LDAP injection vulnerability