Description
BouncyCastle TLS prior to version 1.0.3, when configured to use the JCE (Java Cryptography Extension) for cryptographic functions, provides a weak Bleichenbacher oracle when any TLS cipher suite using RSA key exchange is negotiated. An attacker can recover the private key from a vulnerable application. This vulnerability is referred to as "ROBOT."
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Legion of the Bouncy Castle BouncyCastle TLS
<1.0.3affected
References
- http://www.securityfocus.com/bid/102195 ↗
- http://www.kb.cert.org/vuls/id/144389 ↗
- https://www.debian.org/security/2017/dsa-4072 ↗
- http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00011.html ↗
- https://www.oracle.com/security-alerts/cpuoct2020.html ↗
- https://robotattack.org/ ↗
- https://github.com/bcgit/bc-java/commit/a00b684465b38d722ca9a3543b8af8568e6bad5c ↗
- https://security.netapp.com/advisory/ntap-20171222-0001/ ↗