Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Legion\-Of\-The\-Bouncy\-Castle\-C\#\-Cryptography\-Api
(Bouncycastle)| Repositories |
Unknown: This might be proprietary software. |
| #Vulnerabilities | 1 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2013-02-08 | CVE-2013-1624 | The TLS implementation in the Bouncy Castle Java library before 1.48 and C# library before 1.8 does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, a related issue to CVE-2013-0169. | Legion\-Of\-The\-Bouncy\-Castle\-C\#\-Cryptography\-Api, Legion\-Of\-The\-Bouncy\-Castle\-Java\-Crytography\-Api | N/A |