Junglewise Threat Intelligence

CVE-2020-26939: Observable Differences in Behavior to Error Inputs in Bouncy Castle

CVE-2020-26939 · Severity: low · CVSS 3.1 · Published 2021-04-22

Technologies: org.bouncycastle:bcprov-jdk14 (Maven), org.bouncycastle:bcprov-jdk15to18 (Maven). Vendors: Maven.

Executive brief

Observable Differences in Behavior to Error Inputs in Bouncy Castle

Affected products

  • Maven org.bouncycastle:bc-fips
  • Maven org.bouncycastle:bcprov-jdk14
  • Maven org.bouncycastle:bcprov-ext-jdk15on
  • Maven org.bouncycastle:bcprov-ext-jdk16
  • Maven org.bouncycastle:bcprov-jdk16
  • Maven org.bouncycastle:bcprov-jdk15on
  • Maven org.bouncycastle:bcprov-jdk15
  • Maven org.bouncycastle:bcprov-jdk15to18

Related threats