jBCrypt: integer overflow
| Package(s): | jBCrypt | CVE #(s): | CVE-2015-0886 | ||||||||
| Created: | March 16, 2015 | Updated: | March 18, 2015 | ||||||||
| Description: | From the CVE entry:
Integer overflow in the crypt_raw method in the key-stretching implementation in jBCrypt before 0.4 makes it easier for remote attackers to determine cleartext values of password hashes via a brute-force attack against hashes associated with the maximum exponent. | ||||||||||
| Alerts: |
| ||||||||||