CVE-2017-13098: BouncyCastle JCE TLS Bleichenbacher/ROBOT
Bouncy Castle could allow a remote attacker to obtain sensitive information, caused by an RSA Adaptive Chosen Ciphertext (Bleichenbacher) attack. By utilizing discrepancies in TLS error messages, an attacker could exploit this vulnerability to obtain the data in the encrypted messages once the TLS session has completed. Note: This vulnerability is also known as the ROBOT attack.
Other sources
BouncyCastle TLS prior to version 1.0.3, when configured to use the JCE (Java Cryptography Extension) for cryptographic functions, provides a weak Bleichenbacher oracle when any TLS cipher suite using RSA key exchange is negotiated. An attacker can recover the private key from a vulnerable application. This vulnerability is referred to as "ROBOT."
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2017-13098?
CVE-2017-13098 is a vulnerability in Bouncy Castle TLS prior to version 1.0.3 when configured to use the JCE (Java Cryptography Extension).
How does CVE-2017-13098 work?
CVE-2017-13098 allows a remote attacker to obtain sensitive information by exploiting discrepancies in TLS error messages, leading to an RSA Adaptive Chosen Ciphertext (Bleichenbacher) attack.
What is the severity of CVE-2017-13098?
CVE-2017-13098 has a severity rating of high, with a CVSS score of 5.9.
Which software is affected by CVE-2017-13098?
IBM GDE version 3.0.0.2 and Bouncy Castle versions 1.60-1, 1.60-1+deb10u1, 1.68-2, and 1.72-2 are affected by CVE-2017-13098.
How can I fix CVE-2017-13098?
To fix CVE-2017-13098, update Bouncy Castle to version 1.0.3 or later.