Description The Legion of the Bouncy Castle Java Cryptography API before release 1.38, as used in Crypto Provider Package before 1.36, has unknown impact and remote attack vectors related to "a Bleichenbacher vulnerability in simple RSA CMS signatures without signed attributes."
Metrics CVSS Version 4.0 CVSS Version 3.x CVSS Version 2.0 SSVC
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No CVSS 3.x data is available for this CVE.
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration Affected Products Product Versions bouncycastle bc-java <= 1.37
1.01
1.02
1.03
1.04
1.05
1.06
1.07
1.08
1.09
1.10
1.11
1.12
1.13
1.14
1.15
1.16
1.17
1.18
1.19
1.20
1.21
1.22
1.23
1.24
1.25
1.26
1.27
1.28
1.29
1.30
1.31
1.32
1.33
1.34
1.35
1.36
Viewing 5 of 37 versions. View all CPE cpe:2.3:a:bouncycastle:bc-java:*:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.01:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.02:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.03:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.04:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.05:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.06:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.07:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.08:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.09:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.10:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.11:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.12:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.13:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.14:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.15:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.16:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.17:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.18:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.19:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.20:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.21:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.22:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.23:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.24:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.25:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.26:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.27:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.28:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.29:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.30:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.31:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.32:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.33:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.34:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.35:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:1.36:*:*:*:*:*:*:* Remediation No remediation found in references. bouncycastle bouncy-castle-crypto-package <= 1.35
1.0
1.01
1.02
1.03
1.3.1
1.04
1.05
1.06
1.07
1.08
1.09
1.11
1.12
1.13
1.14
1.15
1.16
1.17
1.18
1.19
1.20
1.21
1.22
1.23
1.24
1.25
1.26
1.27
1.28
1.29
1.30
1.32
1.33
1.34
Viewing 5 of 35 versions. View all CPE cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:*:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.0:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.01:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.02:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.03:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.3.1:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.04:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.05:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.06:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.07:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.08:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.09:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.11:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.12:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.13:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.14:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.15:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.16:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.17:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.18:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.19:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.20:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.21:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.22:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.23:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.24:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.25:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.26:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.27:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.28:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.29:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.30:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.32:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.33:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.34:*:*:*:*:*:*:* Remediation No remediation found in references.
Change History 42 change records found show changes
Date Action Recorded By Jun 16, 2026 CVE Modified [email protected] Apr 23, 2026 Status Change [email protected] May 12, 2025 CPE Deprecation Remap [email protected] May 12, 2025 CPE Deprecation Remap [email protected] May 12, 2025 CPE Deprecation Remap [email protected] May 12, 2025 CPE Deprecation Remap [email protected] May 12, 2025 CPE Deprecation Remap [email protected] May 12, 2025 CPE Deprecation Remap [email protected] May 12, 2025 CPE Deprecation Remap [email protected] May 12, 2025 CPE Deprecation Remap [email protected] May 12, 2025 CPE Deprecation Remap [email protected] May 12, 2025 CPE Deprecation Remap [email protected] May 12, 2025 CPE Deprecation Remap [email protected] May 12, 2025 CPE Deprecation Remap [email protected] May 12, 2025 CPE Deprecation Remap [email protected] May 12, 2025 CPE Deprecation Remap [email protected] May 12, 2025 CPE Deprecation Remap [email protected] May 12, 2025 CPE Deprecation Remap [email protected] May 12, 2025 CPE Deprecation Remap [email protected] May 12, 2025 CPE Deprecation Remap [email protected] May 12, 2025 CPE Deprecation Remap [email protected] May 12, 2025 CPE Deprecation Remap [email protected] May 12, 2025 CPE Deprecation Remap [email protected] May 12, 2025 CPE Deprecation Remap [email protected] May 12, 2025 CPE Deprecation Remap [email protected] May 12, 2025 CPE Deprecation Remap [email protected] May 12, 2025 CPE Deprecation Remap [email protected] May 12, 2025 CPE Deprecation Remap [email protected] May 12, 2025 CPE Deprecation Remap [email protected] May 12, 2025 CPE Deprecation Remap [email protected] May 12, 2025 CPE Deprecation Remap [email protected] May 12, 2025 CPE Deprecation Remap [email protected] May 12, 2025 CPE Deprecation Remap [email protected] May 12, 2025 CPE Deprecation Remap [email protected] May 12, 2025 CPE Deprecation Remap [email protected] May 12, 2025 CPE Deprecation Remap [email protected] May 12, 2025 CPE Deprecation Remap [email protected] May 12, 2025 CPE Deprecation Remap [email protected] May 12, 2025 CPE Deprecation Remap [email protected] Nov 21, 2024 CVE Modified CVE May 14, 2024 CVE Modified [email protected] Mar 30, 2009 Initial Analysis [email protected]