CVE-2020-26939GHSA-72M5-FVVV-55M6
In Legion of the Bouncy Castle BC before 1.61 and BC-FJA before 1.0.1.2, attackers can obtain sensitive information about a private exponent
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 1.61, 1.0.2
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In Legion of the Bouncy Castle BC before 1.61 and BC-FJA before 1.0.1.2, attackers can obtain sensitive information about a private exponent because of Observable Differences in Behavior to Error Inputs. This occurs in org.bouncycastle.crypto.encodings.OAEPEncoding. Sending invalid ciphertext that decrypts to a short payload in the OAEP Decoder could result in the throwing of an early exception, potentially leaking some information about the private exponent of the RSA private key performing the encryption.
Timeline
- CVE published
- Record last updated
Affected versions
- n/a n/a
Version range not reported
- org.bouncycastle:bcprov-jdk14Maven
fixed in 1.61
- org.bouncycastle:bcprov-jdk15Maven
fixed in 1.61
- org.bouncycastle:bcprov-jdk16Maven
fixed in 1.61
- org.bouncycastle:bc-fipsMaven
fixed in 1.0.2
- org.bouncycastle:bcprov-ext-jdk15onMaven
fixed in 1.61
- org.bouncycastle:bcprov-ext-jdk16Maven
fixed in 1.61
- org.bouncycastle:bcprov-jdk15onMaven
fixed in 1.61
- org.bouncycastle:bcprov-jdk15to18Maven
fixed in 1.61