SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2017-13098

BouncyCastle TLS prior to version 1.0.3, when configured to use the JCE (Java Cryptography Extension) for cryptographic functions, provides a weak Bleichenbacher oracle when any TLS cipher suite using RSA key exchange is negotiated.

MEDIUM 5.9EPSS 24.3%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 24.3%, higher than 98% of all known CVEs. Patch or mitigate before the next change window.

Description

BouncyCastle TLS prior to version 1.0.3, when configured to use the JCE (Java Cryptography Extension) for cryptographic functions, provides a weak Bleichenbacher oracle when any TLS cipher suite using RSA key exchange is negotiated. An attacker can recover the private key from a vulnerable application. This vulnerability is referred to as "ROBOT."

CVSS 3.0
5.9 MEDIUMCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
24.28% probability · 98th percentile
CISA KEV
Not listed
Weakness
CWE-203
Affected
bouncycastle/bc-java
Source
cret@cert.org

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.