| タイトル | Crypto Provider Package で使用される The Legion of the Bouncy Castle Java Cryptography API における詳細不明な脆弱性 |
|---|---|
| 概要 | Crypto Provider Package で使用される The Legion of the Bouncy Castle Java Cryptography API には、"符号化された属性を含まない単純な RSA CMS 署名内の Bleichenbacher の脆弱性" に関連する不備があるため、詳細不明な脆弱性が存在します。 |
| 想定される影響 | この脆弱性による影響の詳細は不明です。 |
| 対策 | ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。 |
| 公表日 | 2009年3月29日0:00 |
| 登録日 | 2012年6月26日15:54 |
| 最終更新日 | 2012年6月26日15:54 |
| CVSS2.0 : 危険 | |
| スコア | 10 |
|---|---|
| ベクター | AV:N/AC:L/Au:N/C:C/I:C/A:C |
| Bouncy Castle |
| Bouncy Castle Crypto Package 1.36 未満 |
| Bouncy Castle Java Cryptography API 1.38 未満 |
| No | 変更内容 | 変更日 |
|---|---|---|
| 0 | [2012年06月26日] 掲載 |
2018年2月17日10:37 |
| 概要 | The Legion of the Bouncy Castle Java Cryptography API before release 1.38, as used in Crypto Provider Package before 1.36, has unknown impact and remote attack vectors related to "a Bleichenbacher vulnerability in simple RSA CMS signatures without signed attributes." |
|---|---|
| 概要 | La Legión de la API de Bouncy Castle Java Cryptography anterior a versión 1.38, como es usada en Crypto Provider Package anterior a versión 1.36, presenta un impacto desconocido y vectores de ataque remoto relacionados con "a Bleichenbacher vulnerability in simple RSA CMS signatures without signed attributes". |
| 公表日 | 2009年3月30日10:30 |
| 登録日 | 2021年1月29日14:26 |
| 最終更新日 | 2026年4月23日9:35 |
| 構成1 | 以上 | 以下 | より上 | 未満 | |
| cpe:2.3:a:bouncycastle:bc-java:*:*:*:*:*:*:*:* | 1.37 | ||||
| cpe:2.3:a:bouncycastle:bc-java:1.01:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bc-java:1.02:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bc-java:1.03:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bc-java:1.04:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bc-java:1.05:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bc-java:1.06:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bc-java:1.07:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bc-java:1.08:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bc-java:1.09:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bc-java:1.10:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bc-java:1.11:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bc-java:1.12:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bc-java:1.13:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bc-java:1.14:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bc-java:1.15:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bc-java:1.16:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bc-java:1.17:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bc-java:1.18:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bc-java:1.19:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bc-java:1.20:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bc-java:1.21:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bc-java:1.22:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bc-java:1.23:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bc-java:1.24:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bc-java:1.25:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bc-java:1.26:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bc-java:1.27:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bc-java:1.28:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bc-java:1.29:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bc-java:1.30:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bc-java:1.31:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bc-java:1.32:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bc-java:1.33:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bc-java:1.34:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bc-java:1.35:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bc-java:1.36:*:*:*:*:*:*:* | |||||
| 構成2 | 以上 | 以下 | より上 | 未満 | |
| cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:*:*:*:*:*:*:*:* | 1.35 | ||||
| cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.01:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.02:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.03:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.3.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.04:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.05:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.06:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.07:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.08:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.09:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.11:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.12:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.13:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.14:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.15:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.16:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.17:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.18:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.19:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.20:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.21:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.22:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.23:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.24:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.25:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.26:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.27:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.28:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.29:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.30:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.32:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.33:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.34:*:*:*:*:*:*:* | |||||