QwikSec

Security Database

CVE

CWE

Training

CVE-2015-0886

Published: Feb 28, 2015

Modified: Aug 6, 2024

PUBLISHED

Description

Integer overflow in the crypt_raw method in the key-stretching implementation in jBCrypt before 0.4 makes it easier for remote attackers to determine cleartext values of password hashes via a brute-force attack against hashes associated with the maximum exponent.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

FEDORA-2015-3032

vendor-advisory

x_refsource_FEDORA

FEDORA-2015-3120

vendor-advisory

x_refsource_FEDORA

third-party-advisory

x_refsource_JVN

http://www.mindrot.org/projects/jBCrypt/news/rel04.html

x_refsource_CONFIRM

FEDORA-2015-2994

vendor-advisory

x_refsource_FEDORA

JVNDB-2015-000033

third-party-advisory

x_refsource_JVNDB

https://bugzilla.mindrot.org/show_bug.cgi?id=2097

x_refsource_CONFIRM

[cassandra-commits] 20210924 [jira] [Updated] (CASSANDRA-16990) Update jbcrypt library to 0.4 from 0.3m to resolve CVE-2015-0886

mailing-list

x_refsource_MLIST

[cassandra-commits] 20210924 [jira] [Created] (CASSANDRA-16990) Update jbcrypt library to 0.4 from 0.3m to resolve CVE-2015-0886

mailing-list

x_refsource_MLIST

[cassandra-commits] 20210924 [jira] [Commented] (CASSANDRA-16990) Update jbcrypt library to 0.4 from 0.3m to resolve CVE-2015-0886

mailing-list

x_refsource_MLIST

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.