Security Advisory

CVE-2016-1000346

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-06-04 21:00:00

Last updated 2024-08-06 03:55:27

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

In the Bouncy Castle JCE Provider version 1.55 and earlier the other party DH public key is not fully validated. This can cause issues as invalid keys can be used to reveal details about the other party's private key where static Diffie-Hellman is in use. As of release 1.56 the key parameters are checked on agreement calculation.

← Browse all CVEs View on cve.org ↗