CVE-2017-13098: bouncycastle bc-java Observable Discrepancy
Vulnerability summary
CVE-2017-13098 is a high (CVSS 7.5) Observable Discrepancy vulnerability in bouncycastle bc-java. EPSS estimates a 24.28% chance of exploitation in the next 30 days, higher than 97.8% of scored vulnerabilities. 1 public exploit is recorded.
Advisory lineage
Upstream 0 · Downstream 3 · Related 2Timeline
- 13-12-2017PublishedVulnerability first disclosed.
- 16-09-2024Last modifiedVulnerability information updated.
Description
BouncyCastle TLS prior to version 1.0.3, when configured to use the JCE (Java Cryptography Extension) for cryptographic functions, provides a weak Bleichenbacher oracle when any TLS cipher suite using RSA key exchange is negotiated. An attacker can recover the private key from a vulnerable application. This vulnerability is referred to as "ROBOT."
CVSS metrics
6 scores · 5 sources · 2 versions- NVDNIST5.9MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:NDiffers
- OSV · UbuntuEcosystem advisory · calculated7.5HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- OSV · DebianEcosystem advisory · calculated5.9MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:NDiffers
- OSV · MavenEcosystem advisory · calculated5.9MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:NDiffers
EPSS trend
Probability
24.28%
Chance of exploitation in the next 30 days
Percentile
98%
Versus all other CVEs
30-day change
0.00 pp
From 24.28% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundScanner for Bleichenbacher Oracle in RSA PKCS #1 v1.5
auxiliary/scanner/ssl/bleichenbacher_oracle
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Bouncycastle1 product
- bc-java< 1.59
Debian1 product
- bouncycastle< 1.58-1 | < 1.56-1+deb9u1
Legion of the bouncy castle1 product
- bouncycastle tls< 1.0.3
Org.bouncycastle1 product
- bcprov-jdk15on< 1.0.3
Ubuntu1 product
- bouncycastle< 1.59-1
5 vendors · 5 products
References
15 links- www.kb.cert.org/vuls/id/144389Third Party AdvisoryX Refsource CERT VNIssue TrackingMitigationUS Government ResourceREPORTWEB
www.debian.org/security/2017/dsa-4072Vendor AdvisoryX Refsource DEBIANIssue TrackingThird Party AdvisoryWEB- lists.opensuse.org/opensuse-security-announce/2020-05/msg00011.htmlVendor AdvisoryX Refsource SUSEWEB
- github.com/bcgit/bc-java/commit/a00b684465b38d722ca9a3543b8af8568e6bad5cX Refsource CONFIRMIssue TrackingPatchThird Party AdvisoryWEB
- security.netapp.com/advisory/ntap-20171222-0001/X Refsource CONFIRMIssue TrackingThird Party Advisory
Show all 15 references
- github.com/bcgit/bc-javaPACKAGE