CVE-2007-6721

bouncycastle: unknown vulnerability in simple RSA CMS signatures

Published Mar 30, 2009 CVSS 2.0 · 10.0 Critical EPSS 2.4% KEV · Not listed
Description
The Legion of the Bouncy Castle Java Cryptography API before release 1.38, as used in Crypto Provider Package before 1.36, has unknown impact and remote attack vectors related to "a Bleichenbacher vulnerability in simple RSA CMS signatures without signed attributes."

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2022-4466 The Legion of the Bouncy Castle Java Cryptography API before release 1.38, as used in Crypto Provider Package before 1.36, has unknown impact and remote attack vectors related to "a Bleichenbacher vulnerability in simple RSA CMS signatures without signed attributes."
Github GHSA Github GHSA GHSA-m26p-m559-g5j5 Legion of the Bouncy Castle Java Cryptography API Bleichenbacher Oracle Vulnerability
History
Type Values Removed Values Added
First Time appeared Bouncycastle bc-java
CPEs cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:*:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.01:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.02:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.03:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.04:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.05:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.06:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.07:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.08:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.09:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.10:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.11:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.12:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.13:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.14:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.15:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.16:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.17:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.18:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.19:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.20:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.21:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.22:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.23:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.24:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.25:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.26:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.27:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.28:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.29:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.30:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.31:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.32:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.33:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.34:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.35:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.36:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:bc-java:*:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:bc-java:1.01:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:bc-java:1.02:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:bc-java:1.03:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:bc-java:1.04:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:bc-java:1.05:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:bc-java:1.06:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:bc-java:1.07:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:bc-java:1.08:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:bc-java:1.09:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:bc-java:1.10:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:bc-java:1.11:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:bc-java:1.12:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:bc-java:1.13:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:bc-java:1.14:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:bc-java:1.15:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:bc-java:1.16:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:bc-java:1.17:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:bc-java:1.18:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:bc-java:1.19:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:bc-java:1.20:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:bc-java:1.21:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:bc-java:1.22:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:bc-java:1.23:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:bc-java:1.24:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:bc-java:1.25:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:bc-java:1.26:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:bc-java:1.27:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:bc-java:1.28:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:bc-java:1.29:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:bc-java:1.30:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:bc-java:1.31:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:bc-java:1.32:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:bc-java:1.33:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:bc-java:1.34:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:bc-java:1.35:*:*:*:*:*:*:*
cpe:2.3:a:bouncycastle:bc-java:1.36:*:*:*:*:*:*:*
Vendors & Products Bouncycastle legion-of-the-bouncy-castle-java-crytography-api
Bouncycastle bc-java
Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 4:18 PM
Reserved
Mar 29, 2009, 12:00 AM
Status
Modified
Published
Mar 30, 2009, 1:30 AM
Modified
Jun 16, 2026, 10:48 PM
Severity
Public date
Nov 7, 2007, 12:00 AM