CVE-2007-6721
CVE-2007-6721
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The Legion of the Bouncy Castle Java Cryptography API before release 1.38, as used in Crypto Provider Package before 1.36, has unknown impact and remote attack vectors related to "a Bleichenbacher vulnerability in simple RSA CMS signatures without signed attributes."
EPSS 2.4% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
bouncycastle Debian:12
- Affected ranges
- ECOSYSTEM: < 1.38-1
Update to 1.38-1
bouncycastle Debian:13
- Affected ranges
- ECOSYSTEM: < 1.38-1
Update to 1.38-1
bouncycastle Debian:14
- Affected ranges
- ECOSYSTEM: < 1.38-1
Update to 1.38-1
Original sources
- http://freshmeat.net/projects/bouncycastlecryptoapi/releases/265580
- http://www.osvdb.org/50358
- http://www.bouncycastle.org/csharp/
- http://www.osvdb.org/50360
- http://www.bouncycastle.org/releasenotes.html
- http://www.osvdb.org/50359
- http://www.bouncycastle.org/devmailarchive/msg08195.html
- https://nvd.nist.gov/vuln/detail/CVE-2007-6721