CVE-2015-0886
N/A
Published: February 28, 2015 at 02:00 AM UTC
Updated: June 17, 2026 at 12:21 AM UTC
2 products affected across 2 vendorsFedoraJbcrypt
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 5%
Description
Integer overflow in the crypt_raw method in the key-stretching implementation in jBCrypt before 0.4 makes it easier for remote attackers to determine cleartext values of password hashes via a brute-force attack against hashes associated with the maximum exponent.
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
- http://jvn.jp/en/jp/JVN77718330/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2015-000033
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151496.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151786.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151797.html
References (10)
Third Party Advisoryx_refsource_JVNVendor Advisory
Source: [email protected]
http://jvn.jp/en/jp/JVN77718330/index.htmlThird Party Advisoryx_refsource_JVNDBVDB EntryVendor Advisory
Source: [email protected]
http://jvndb.jvn.jp/jvndb/JVNDB-2015-000033Vendor Advisoryx_refsource_FEDORAThird Party Advisory
Source: [email protected]
http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151496.htmlVendor Advisoryx_refsource_FEDORAThird Party Advisory
Source: [email protected]
http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151786.htmlVendor Advisoryx_refsource_FEDORAThird Party Advisory
Source: [email protected]
http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151797.htmlx_refsource_CONFIRMRelease NotesVendor Advisory
Source: [email protected]
http://www.mindrot.org/projects/jBCrypt/news/rel04.htmlx_refsource_CONFIRMIssue TrackingVendor Advisory
Source: [email protected]
https://bugzilla.mindrot.org/show_bug.cgi?id=2097Mailing Listx_refsource_MLIST
Source: [email protected]
https://lists.apache.org/thread.html/rbd23e3ac8113b4da0a025c0e45170b6ec317383a1cf06090c2c717aa%40%3Ccommits.cassandra.apache.org%3EQuick Info
StatusMODIFIED
CWE
CWE-190
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card