PT-2017-12914 · Bouncy Castle+1 · Bouncycastle Tls+1

Published 2017-12-13 · Updated 2025-05-12 · CVE-2017-13098

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions BouncyCastle TLS versions prior to 1.0.3

Description The issue provides a weak Bleichenbacher oracle when any TLS cipher suite using RSA key exchange is negotiated, allowing an attacker to recover the private key from a vulnerable application. This is referred to as "ROBOT."

Recommendations For versions prior to 1.0.3, update to version 1.0.3 or later to resolve the issue. As a temporary workaround, consider disabling the use of RSA key exchange in TLS cipher suites until a patch is available. Restrict access to sensitive applications using BouncyCastle TLS to minimize the risk of exploitation.

Exploit

Fix

Side Channel Attack

Weakness Enumeration

CWE-203

Related Identifiers

CVE-2017-13098

DSA-4072-1

GHSA-WRWF-PMMJ-W989

MGASA-2018-0376

OPENSUSE-SU-2018_1689-1

OPENSUSE-SU-2018_2131-1

OPENSUSE-SU-2020:0607-1

OPENSUSE-SU-2020_0607-1

OPENSUSE-SU-2024:10661-1

Affected Products

Bouncycastle Tls

Suse

References · 47

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ssl/bleichenbacher_oracle.py · Exploit
• https://github.com/bcgit/bc-java/commit/a00b684465b38d722ca9a3543b8af8568e6bad5c · Patch
• https://debian.org/security/2017/dsa-4072 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-13098 · Security Note
• https://ubuntu.com/security/CVE-2017-13098 · Vendor Advisory
• https://debian.org/security/2018/dsa-4233 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2017-13098 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-4072-1 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2018-0376 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00011.html · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10661-1 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2018-0376.html · Security Note
• https://cve.org/CVERecord?id=CVE-2017-13098 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2017-13098 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-wrwf-pmmj-w989 · Vendor Advisory