CVE:CVE-2016-1000346
CNNVD:CNNVD-201806-157
Bouncy Castle是Bouncy Castle组织的密码学中使用的API集合。它包括适用于Java和C#编程语言的API 。
Bouncy Castle JCE Provider 1.55及之前版本中存在加密问题漏洞，该漏洞源于程序没有充分的验证DH公钥。目前尚无此漏洞的相关信息，请随时关注CNNVD或厂商公告。
solution:Upgrade bouncycastle legion-of-the-bouncy-castle-java-crytography-api to a higher version than 1.55,and avoid the version (,1.55]; Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0