CVE-2016-1000352

In the Bouncy Castle JCE Provider version 1.55 and earlier the ECIES implementation allowed the use of ECB mode. This mode is regarded as unsafe and support for it has been removed from the provider.

Score

CVSS 3.0 7.4 High

Status

Modified - cve@mitre.org

Published

2018-06-04

Last modified

2024-08-06

Weaknesses

CWE-310

Affected products

• Bc-java (Bouncycastle)

References

• https://access.redhat.com/errata/RHSA-2018:2669
• https://access.redhat.com/errata/RHSA-2018:2927
• https://github.com/bcgit/bc-java/commit/9385b0ebd277724b167fe1d1456e3c112112be1f
• https://security.netapp.com/advisory/ntap-20181127-0004/
• https://www.oracle.com/security-alerts/cpuoct2020.html