Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Legion of the Bouncy Castle Java Cryptography API before release 1.38, as used in Crypto Provider Package before 1.36, has unknown impact and remote attack vectors related to "a Bleichenbacher vulnerability in simple RSA CMS signatures without signed attributes."
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Bouncycastle OpenSSL畸形ASN.1结构处理拒绝服务漏洞
Vulnerability Description
OpenSSL是OpenSSL团队开发的一个开源的能够实现安全套接层（SSL v2/v3）和安全传输层（TLS v1）协议的通用加密库，它支持多种加密算法，包括对称密码、哈希算法、安全散列算法等。 OpenSSL的协议处理实现上存在漏洞，远程攻击者可能利用此漏洞在服务器执行拒绝服务攻击。 在解析某些无效的ASN.1结构时OpenSSL可能没有正确地处理出错情况，导致死循环。通过触发这个死循环，攻击者可能导致拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A