CVE-2007-6721 json
Legion of the Bouncy Castle Java Cryptography API Bleichenbacher Oracle Vulnerability
published 2009-03-30 17 y ago modified 2026-06-16 4 mo ago also GHSA-m26p-m559-g5j5 , EUVD-2022-4466
- cvss
- 10.0
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 2.4%
- EPSS 2.4% chance of exploitation in 30 days, percentile 84%
- public exploits
- 0
- none known
Summary
The Legion of the Bouncy Castle Java Cryptography API before release 1.38, as used in Crypto Provider Package before 1.36, has unknown impact and remote attack vectors related to "a Bleichenbacher vulnerability in simple RSA CMS signatures without signed attributes."
Patch / fix
- maven bouncycastle:bcprov-jdk14 1.38
- maven bouncycastle:bcprov-jdk15 1.38
- maven bouncycastle:bcprov-jdk16 1.38
- bouncycastle Debian 14, Debian 13, Debian 12 1.38-1
debian advisories DEBIAN-CVE-2007-6721
- bouncycastle.org/csharp/ advisory
- bouncycastle.org/devmailarchive/msg08195.html advisory
Vendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
red hat product security vex CVE-2007-6721 updated
bouncycastle: unknown vulnerability in simple RSA CMS signatures
-
Red Hat All currently supported Red Hat productsnot affected: vulnerable code not present
Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf
Exploit prediction
2.41% chance of exploitation in the next 30 days, higher than 84% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 10.0 | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| maven | bouncycastle:bcprov-jdk14 | <1.38 |
1.38 |
| maven | bouncycastle:bcprov-jdk15 | <1.38 |
1.38 |
| maven | bouncycastle:bcprov-jdk16 | <1.38 |
1.38 |
Classification
- Weakness
-
- CWE-203 Observable Discrepancy
References
-
bouncycastle.org
/csharp/
patch, vendor-advisory
-
bouncycastle.org
/devmailarchive/msg08195.html
mailing-list, web, patch, vendor-advisory
- freshmeat.net /projects/bouncycastlecryptoapi/releases/265580
-
osvdb.org
/50358
vdb-entry
-
osvdb.org
/50360
vdb-entry
- bouncycastle.org /releasenotes.html
-
osvdb.org
/50359
vdb-entry
-
nvd.nist.gov
/vuln/detail/CVE-2007-6721
advisory
-
github.com
/bcgit/bc-java
package
-
web.archive.org
/web/20071022023551/http://www.bouncycastle.org/csharp
web
-
web.archive.org
/web/20080316202318/http://www.bouncycastle.org:80/releasenotes.html
web
Sources
- CVE List CVE-2007-6721
- GitHub Advisory GHSA-m26p-m559-g5j5
- NVD CVE-2007-6721
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.