DEBIAN-CVE-2016-1000352

DEBIAN-CVE-2016-1000352 PUBLISHED CVSS 7.400000095367432 HIGH

In the Bouncy Castle JCE Provider version 1.55 and earlier the ECIES implementation allowed the use of ECB mode. This mode is regarded as unsafe and support for it has been removed from the provider.

Risk Scores

CVSS v3.0

7.400000095367432

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Affected Products

Vendor	Product	Versions
Debian:11	bouncycastle	0, 0, 0
Debian:14	bouncycastle	0, 0, 0
Debian:12	bouncycastle	0, 0, 0
Debian:13	bouncycastle	0, 0, 0

Timeline

Jun 4, 2018 CVE Published
Apr 28, 2026 CVE Updated

References

https://security-tracker.debian.org/tracker/CVE-2016-1000352 advisory

Open in Interactive Console →