Bouncy Castle BC Java before 1.66, BC C# .NET before 1.8.7, BC-FJA before 1.0.1.2…
Priority LOW 30CWE-362Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- High
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- Partial Red Hat: 5 fixed, 5 without a fix
Attack profile from CVSS 3.1 · NVD. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-203.
Summary
Bouncy Castle BC Java before 1.66, BC C# .NET before 1.8.7, BC-FJA before 1.0.1.2, 1.0.2.1, and BC-FNA before 1.0.1.1 have a timing issue within the EC math library that can expose information about the private key when an attacker is able to observe timing information for the generation of multiple deterministic ECDSA signatures.
Why it matters now
EPSS 0.01522 74th percentileScored 2026-11-07
Fix Partial org.bouncycastle:bc-fips (Maven): 1.0.2.1org.bouncycastle:bcprov-ext-jdk15on (Maven): 1.66+7 more productsRed Hat: 5 advisoriesRed Hat: 5 fixed, 5 without a fix
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
| — | org.bouncycastle:bc-fips (Maven) | before 1.0.2.1 | 1.0.2.1 | Patch available | GHSA-6xx3-rg99-gc3p |
| — | org.bouncycastle:bcprov-ext-jdk15on (Maven) | before 1.66 | 1.66 | Patch available | GHSA-6xx3-rg99-gc3p |
| — | org.bouncycastle:bcprov-ext-jdk16 (Maven) | before 1.66 | 1.66 | Patch available | GHSA-6xx3-rg99-gc3p |
| — | org.bouncycastle:bcprov-jdk14 (Maven) | before 1.66 | 1.66 | Patch available | GHSA-6xx3-rg99-gc3p |
| — | org.bouncycastle:bcprov-jdk15 (Maven) | before 1.66 | 1.66 | Patch available | GHSA-6xx3-rg99-gc3p |
| — | org.bouncycastle:bcprov-jdk15on (Maven) | before 1.66 | 1.66 | Patch available | GHSA-6xx3-rg99-gc3p |
| — | org.bouncycastle:bcprov-jdk15to18 (Maven) | before 1.66 | 1.66 | Patch available | GHSA-6xx3-rg99-gc3p |
| — | org.bouncycastle:bcprov-jdk16 (Maven) | before 1.66 | 1.66 | Patch available | GHSA-6xx3-rg99-gc3p |
| — | BouncyCastle (NuGet) | before 1.8.7 | 1.8.7 | Patch available | GHSA-6xx3-rg99-gc3p |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
- org.bouncycastle:bc-fips (Maven) Vendor— Affected before 1.0.2.1 Fixed in 1.0.2.1 Patch available GHSA-6xx3-rg99-gc3p
- org.bouncycastle:bcprov-ext-jdk15on (Maven) Vendor— Affected before 1.66 Fixed in 1.66 Patch available GHSA-6xx3-rg99-gc3p
- org.bouncycastle:bcprov-ext-jdk16 (Maven) Vendor— Affected before 1.66 Fixed in 1.66 Patch available GHSA-6xx3-rg99-gc3p
- org.bouncycastle:bcprov-jdk14 (Maven) Vendor— Affected before 1.66 Fixed in 1.66 Patch available GHSA-6xx3-rg99-gc3p
- org.bouncycastle:bcprov-jdk15 (Maven) Vendor— Affected before 1.66 Fixed in 1.66 Patch available GHSA-6xx3-rg99-gc3p
- org.bouncycastle:bcprov-jdk15on (Maven) Vendor— Affected before 1.66 Fixed in 1.66 Patch available GHSA-6xx3-rg99-gc3p
- org.bouncycastle:bcprov-jdk15to18 (Maven) Vendor— Affected before 1.66 Fixed in 1.66 Patch available GHSA-6xx3-rg99-gc3p
- org.bouncycastle:bcprov-jdk16 (Maven) Vendor— Affected before 1.66 Fixed in 1.66 Patch available GHSA-6xx3-rg99-gc3p
- BouncyCastle (NuGet) Vendor— Affected before 1.8.7 Fixed in 1.8.7 Patch available GHSA-6xx3-rg99-gc3p
CPE configurations NVD · 4
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:bouncycastle:bc-csharp:*:*:*:*:*:*:*:* | before 1.8.7 | Vulnerable | Legion of the Bouncy Castle Inc. |
| cpe:2.3:a:bouncycastle:bouncy_castle_fips_.net_api:*:*:*:*:*:*:*:* | before 1.0.1.1 | Vulnerable | Legion of the Bouncy Castle Inc. |
| cpe:2.3:a:bouncycastle:fips_java_api:*:*:*:*:*:*:*:* | before 1.0.1.2; 1.0.2 to before 1.0.2.1 | Vulnerable | Legion of the Bouncy Castle Inc. |
| cpe:2.3:a:bouncycastle:the_bouncy_castle_crypto_package_for_java:*:*:*:*:*:*:*:* | before 1.66 | Vulnerable | Legion of the Bouncy Castle Inc. |
- cpe:2.3:a:bouncycastle:bc-csharp:*:*:*:*:*:*:*:* Versions before 1.8.7 Vulnerable ·Legion of the Bouncy Castle Inc.
- cpe:2.3:a:bouncycastle:bouncy_castle_fips_.net_api:*:*:*:*:*:*:*:* Versions before 1.0.1.1 Vulnerable ·Legion of the Bouncy Castle Inc.
- cpe:2.3:a:bouncycastle:fips_java_api:*:*:*:*:*:*:*:* Versions before 1.0.1.2; 1.0.2 to before 1.0.2.1 Vulnerable ·Legion of the Bouncy Castle Inc.
- cpe:2.3:a:bouncycastle:the_bouncy_castle_crypto_package_for_java:*:*:*:*:*:*:*:* Versions before 1.66 Vulnerable ·Legion of the Bouncy Castle Inc.
Remediation
- Fix · GHSA-6xx3-rg99-gc3p org.bouncycastle:bc-fips (Maven) Fixed in 1.0.2.1 Advisory →
- Fix · GHSA-6xx3-rg99-gc3p org.bouncycastle:bcprov-ext-jdk15on (Maven) Fixed in 1.66 Advisory →
- Fix · GHSA-6xx3-rg99-gc3p org.bouncycastle:bcprov-ext-jdk16 (Maven) Fixed in 1.66 Advisory →
- Fix · GHSA-6xx3-rg99-gc3p org.bouncycastle:bcprov-jdk14 (Maven) Fixed in 1.66 Advisory →
- Fix · GHSA-6xx3-rg99-gc3p org.bouncycastle:bcprov-jdk15 (Maven) Fixed in 1.66 Advisory →
- Fix · GHSA-6xx3-rg99-gc3p org.bouncycastle:bcprov-jdk15on (Maven) Fixed in 1.66 Advisory →
- Fix · GHSA-6xx3-rg99-gc3p org.bouncycastle:bcprov-jdk15to18 (Maven) Fixed in 1.66 Advisory →
- Fix · GHSA-6xx3-rg99-gc3p org.bouncycastle:bcprov-jdk16 (Maven) Fixed in 1.66 Advisory →
- Fix · GHSA-6xx3-rg99-gc3p BouncyCastle (NuGet) Fixed in 1.8.7 Advisory →
Red Hat 5 advisories
- RHSA-2022:1029 Released 2022-03-23 · Red Hat rating ImportantRed Hat Integration Camel-K 1.6.4 release and security update
- RHINT Camel-K 1.6.4
- RHSA-2022:1013 Released 2022-03-22 · Red Hat rating ModerateRed Hat Integration Camel Extensions for Quarkus 2.2.1 security update
- RHINT Camel-Q 2.2.1
- RHSA-2021:5134 Released 2021-12-14 · Red Hat rating CriticalRed Hat Fuse 7.10.0 release and security update
- Red Hat Fuse 7.10
Show 2 more Red Hat advisories
- RHSA-2021:2755 Released 2021-07-15 · Red Hat rating ModerateEAP XP 2 security update to CVE fixes in the EAP 7.3.x base
- Red Hat EAP-XP 2.0.0 via EAP 7.3.x base
- RHSA-2021:1401 Released 2021-04-27 · Red Hat rating ModerateRed Hat Fuse 7.8.1 patch release and security update
- Red Hat Fuse 7.8.1
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Integration Camel Quarkus 1 | Affected | No fix yet |
| Red Hat JBoss Enterprise Application Platform Expansion Pack | Affected | No fix yet |
| Red Hat OpenShift Application Runtimes | Affected | No fix yet |
| Red Hat Single Sign-On 7 | Affected | No fix yet |
| Red Hat support for Spring Boot | Affected | No fix planned: Will not fix |
| RHINT Camel-K 1.6.4 | Fixed | RHSA-2022:1029 |
| RHINT Camel-Q 2.2.1 | Fixed | RHSA-2022:1013 |
| Red Hat EAP-XP 2.0.0 via EAP 7.3.x base | Fixed | RHSA-2021:2755 |
| Red Hat Fuse 7.10 | Fixed | RHSA-2021:5134 |
| Red Hat Fuse 7.8.1 | Fixed | RHSA-2021:1401 |
Not affected: 7 products
- Red Hat Decision Manager 7
- Red Hat Enterprise Linux 9
- Red Hat Fuse 7
- Red Hat JBoss Enterprise Application Platform 7
- Red Hat Process Automation 7
- Red Hat Virtualization 4
- Red Hat build of Quarkus
Timeline
- 2026-10-02 Threatist record created from CVE-2020-15522
- 2026-10-03 Alias added: GHSA-6xx3-rg99-gc3p
References
Advisory 4
More Legion of the Bouncy Castle Inc. Bc-csharp vulnerabilities
- TI-2026-65844 MTI/A0 DHAgreement does not validate the peer's ephemeral value CVSS 4.0CRITICAL 9.1
- TI-2026-66020 Unbounded HSS public key level count allows huge array allocation during signature verification CVSS 4.0HIGH 8.7
- TI-2026-66017 Unbounded ASN.1 nesting depth causes process-terminating stack overflow CVSS 4.0HIGH 8.7
- TI-2026-65849 Unbounded allocation from OpenPGP signature and user attribute subpacket lengths CVSS 4.0HIGH 8.7
- TI-2026-65843 Unbounded CMP/CRMF password-based MAC iteration count allows CPU exhaustion CVSS 4.0HIGH 8.7
- TI-2026-65841 DTLS handshake reassembler allocates buffer from unchecked 24-bit length CVSS 4.0HIGH 8.7
Sources
- CVE-2020-15522 · CVE Program
- CVE-2020-15522 · NVD
- FIRST EPSS
- GHSA-6xx3-rg99-gc3p · GitHub Advisory Database · CC BY 4.0
- CVE-2020-15522 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences