CVE-2017-13098

High

Description

BouncyCastle TLS prior to version 1.0.3, when configured to use the JCE (Java Cryptography Extension) for cryptographic functions, provides a weak Bleichenbacher oracle when any TLS cipher suite using RSA key exchange is negotiated. An attacker can recover the private key from a vulnerable application. This vulnerability is referred to as "ROBOT."

SeverityHigh

CVSS7.5

Exploit probability—

ProductBouncycastle Bc-java

PublishedDec 13, 2017

First seenDec 13, 2017

Weakness typeCWE-203CWE-203

How to fix

Update

bouncycastle bc-java1.59 or later
org.bouncycastle:bcprov-jdk15on1.0.3 or later

Vendor advisories

debian.org/security/2017/dsa-4072

Affected products

Product	Affected versions	Fixed in
bouncycastle bc-java	v < 1.59	1.59
org.bouncycastle:bcprov-jdk15onMaven	v < 1.0.3	1.0.3

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.