Fluid Attacks Database

Description

Timing based private key exposure in Bouncy Castle Bouncy Castle BC Java before 1.66, BC C# .NET before 1.8.7, BC-FJA before 1.0.2.1, BC before 1.66, BC-FNA before 1.0.1.1 have a timing issue within the EC math library that can expose information about the private key when an attacker is able to observe timing information for the generation of multiple deterministic ECDSA signatures.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
debian 12	bouncycastle	>=0 <1.68-1	1.68-1
maven	org.bouncycastle:bcprov-ext-jdk15on	>=0 <1.66	1.66
maven	org.bouncycastle:bcprov-jdk14	>=0 <1.66	1.66
maven	org.bouncycastle:bcprov-jdk16	>=0 <1.66	1.66
maven	org.bouncycastle:bc-fips	>=0 <1.0.2.1	1.0.2.1
maven	org.bouncycastle:bcprov-jdk15to18	>=0 <1.66	1.66
debian 13	bouncycastle	>=0 <1.68-1	1.68-1
debian 14	bouncycastle	>=0 <1.68-1	1.68-1
maven	org.bouncycastle:bcprov-jdk15	>=0 <1.66	1.66
maven	org.bouncycastle:bcprov-jdk15on	>=0 <1.66	1.66

1-10 of 13

Aliases

1. CVE-2020-155222. NVD-2020-155223. OSV-DEBIAN-2020-155224. OSV-2020-155225. GCVE-2020-155226. SECURITY-TRACKER-CVE-2020-15522

References

1. https://github.com/bcgit/bc-csharp/wiki/CVE-2020-155222. https://github.com/bcgit/bc-java/wiki/CVE-2020-155223. https://security.netapp.com/advisory/ntap-20210622-00074. https://www.bouncycastle.org/releasenotes.html

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.