| Title | Crypto Provider Package で使用される The Legion of the Bouncy Castle Java Cryptography API における詳細不明な脆弱性 |
|---|---|
| Summary | Crypto Provider Package で使用される The Legion of the Bouncy Castle Java Cryptography API には、"符号化された属性を含まない単純な RSA CMS 署名内の Bleichenbacher の脆弱性" に関連する不備があるため、詳細不明な脆弱性が存在します。 |
| Possible impacts | この脆弱性による影響の詳細は不明です。 |
| Solution | ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。 |
| Publication Date | March 29, 2009, midnight |
| Registration Date | June 26, 2012, 3:54 p.m. |
| Last Update | June 26, 2012, 3:54 p.m. |
| CVSS2.0 : 危険 | |
| Score | 10 |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
| Bouncy Castle |
| Bouncy Castle Crypto Package 1.36 未満 |
| Bouncy Castle Java Cryptography API 1.38 未満 |
| No | Changed Details | Date of change |
|---|---|---|
| 0 | [2012年06月26日] 掲載 |
Feb. 17, 2018, 10:37 a.m. |
| Summary | The Legion of the Bouncy Castle Java Cryptography API before release 1.38, as used in Crypto Provider Package before 1.36, has unknown impact and remote attack vectors related to "a Bleichenbacher vulnerability in simple RSA CMS signatures without signed attributes." |
|---|---|
| Summary | La Legión de la API de Bouncy Castle Java Cryptography anterior a versión 1.38, como es usada en Crypto Provider Package anterior a versión 1.36, presenta un impacto desconocido y vectores de ataque remoto relacionados con "a Bleichenbacher vulnerability in simple RSA CMS signatures without signed attributes". |
| Publication Date | March 30, 2009, 10:30 a.m. |
| Registration Date | Jan. 29, 2021, 2:26 p.m. |
| Last Update | April 23, 2026, 9:35 a.m. |
| Configuration1 | or higher | or less | more than | less than | |
| cpe:2.3:a:bouncycastle:bc-java:*:*:*:*:*:*:*:* | 1.37 | ||||
| cpe:2.3:a:bouncycastle:bc-java:1.01:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bc-java:1.02:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bc-java:1.03:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bc-java:1.04:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bc-java:1.05:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bc-java:1.06:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bc-java:1.07:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bc-java:1.08:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bc-java:1.09:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bc-java:1.10:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bc-java:1.11:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bc-java:1.12:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bc-java:1.13:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bc-java:1.14:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bc-java:1.15:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bc-java:1.16:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bc-java:1.17:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bc-java:1.18:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bc-java:1.19:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bc-java:1.20:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bc-java:1.21:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bc-java:1.22:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bc-java:1.23:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bc-java:1.24:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bc-java:1.25:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bc-java:1.26:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bc-java:1.27:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bc-java:1.28:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bc-java:1.29:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bc-java:1.30:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bc-java:1.31:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bc-java:1.32:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bc-java:1.33:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bc-java:1.34:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bc-java:1.35:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bc-java:1.36:*:*:*:*:*:*:* | |||||
| Configuration2 | or higher | or less | more than | less than | |
| cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:*:*:*:*:*:*:*:* | 1.35 | ||||
| cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.01:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.02:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.03:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.3.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.04:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.05:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.06:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.07:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.08:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.09:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.11:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.12:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.13:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.14:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.15:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.16:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.17:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.18:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.19:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.20:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.21:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.22:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.23:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.24:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.25:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.26:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.27:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.28:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.29:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.30:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.32:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.33:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.34:*:*:*:*:*:*:* | |||||