Debian/bouncycastle: unknown
The Bouncy Castle Java library before 1.51 does not validate a point is withing the elliptic curve, which makes it easier for remote attackers to obtain private keys via a series of crafted elliptic c
Action: Upgrade bouncycastle to 1.51-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.51-1 | - |
Fixed versions
| 1.51-1 |
Sources
- osv: DEBIAN-CVE-2015-7940#Debian:14/bouncycastle
- https://security-tracker.debian.org/tracker/CVE-2015-7940
published · modified · JSON