DEBIAN-CVE-2016-1000344

DEBIAN-CVE-2016-1000344 PUBLISHED CVSS 7.400000095367432 HIGH

In the Bouncy Castle JCE Provider version 1.55 and earlier the DHIES implementation allowed the use of ECB mode. This mode is regarded as unsafe and support for it has been removed from the provider.

Risk Scores

CVSS 3.0

7.400000095367432

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Affected Products

Vendor	Product	Versions
Debian:14	bouncycastle	0, 0, 0
Debian:12	bouncycastle	0, 0, 0
Debian:11	bouncycastle	0, 0, 0
Debian:13	bouncycastle	0, 0, 0

Exploit Intelligence

releasenotes.html (github-poc)

Timeline

Jun 4, 2018 CVE Published
Apr 28, 2026 CVE Updated

References

https://security-tracker.debian.org/tracker/CVE-2016-1000344 advisory

Open in Interactive Console →