Executive brief
Deserialization of Untrusted Data in Bouncy castle
Affected products
- Maven org.bouncycastle:bcprov-jdk15on
Junglewise Threat Intelligence
CVE-2018-1000613: Deserialization of Untrusted Data in Bouncy castle
CVE-2018-1000613 · Severity: low · CVSS 3 · Published 2018-10-17
Technologies: org.bouncycastle:bcprov-jdk15on (Maven). Vendors: Maven.
Related threats
- Bouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation.
- Bouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack")
- Bouncy Castle Java Cryptography API DNS poisoning in BCJSSE
- Bouncy Castle Denial of Service (DoS)
- Bouncy Castle For Java LDAP injection vulnerability