Medium severity · published May 20, 2021
CVE-2020-15522
Bouncy Castle BC Java before 1.66, BC C# .NET before 1.8.7, BC-FJA before 1.0.1.2, 1.0.2.1, and BC-FNA before 1.0.1.1 have a timing issue within the EC math library that can…
5.9
CVSS
1.5%
EPSS
No
On KEV
Description
Bouncy Castle BC Java before 1.66, BC C# .NET before 1.8.7, BC-FJA before 1.0.1.2, 1.0.2.1, and BC-FNA before 1.0.1.1 have a timing issue within the EC math library that can expose information about the private key when an attacker is able to observe timing information for the generation of multiple deterministic ECDSA signatures.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
High
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.5% · higher than 74% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BC
Bc-csharp · Bouncycastle
before 1.8.7 · source: NVD
BC
Bouncy Castle Fips .net Api · Bouncycastle
before 1.0.1.1 · source: NVD
FJ
Fips Java Api · Bouncycastle
before 1.0.1.2; 1.0.2 before 1.0.2.1 · source: NVD
TB
The Bouncy Castle Crypto Package For Java · Bouncycastle
before 1.66 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-15522
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-15522
Third Party Advisory
https://github.com/bcgit/bc-csharp/wiki/CVE-2020-15522
Third Party Advisory
https://github.com/bcgit/bc-java/wiki/CVE-2020-15522
security.netapp.com
https://security.netapp.com/advisory/ntap-20210622-0007/
Release Notes
https://www.bouncycastle.org/releasenotes.html
More from Bc-csharp
7.5
CVE-2026-103604
Quadratic-time escaping when converting X.509 distinguished names to strings
7.5
CVE-2026-103603
Unbounded HSS public key level count allows huge array allocation during signature verification
7.5
CVE-2026-103601
CcmBlockCipher and KCcmBlockCipher leave unverified plaintext in the output buffer after a failed tag check
7.5
CVE-2026-103600
Unbounded ASN.1 nesting depth causes process-terminating stack overflow
7.5
CVE-2026-63578
Unbounded PBE iteration count when decrypting PKCS#8 private keys