cbcvebase.
CVE-2018-1000180
published 2018-06-05

CVE-2018-1000180: Bouncy Castle BC 1.54 - 1.59, BC-FJA 1.0.0, BC-FJA 1.0.1 and earlier have a flaw in the Low-level interface to RSA key pair generator, specifically RSA Key…

high7.5CVSS 3.0
AVNACLPRNUINSUCHINAN
Bouncy Castle BC 1.54 - 1.59, BC-FJA 1.0.0, BC-FJA 1.0.1 and earlier have a flaw in the Low-level interface to RSA key pair generator, specifically RSA Key Pairs generated in low-level API with added certainty may have less M-R tests than expected. This appears to be fixed in versions BC 1.60 beta 4 and later, BC-FJA 1.0.2 and later.

Affected

29 ranges· showing 25
VendorProductVersion rangeFixed in
bouncycastlebc-java1.54 – 1.59
bouncycastlefips_java_api<= 1.0.1
debianbouncycastle< bouncycastle 1.59-2 (bookworm)bouncycastle 1.59-2 (bookworm)
debiandebian_linux
oracleapi_gateway
oraclebusiness_process_management_suite
oraclebusiness_process_management_suite
oraclebusiness_process_management_suite
oraclebusiness_transaction_management
oraclecommunications_application_session_controller
oraclecommunications_application_session_controller
oraclecommunications_converged_application_server< 7.0.0.17.0.0.1
oraclecommunications_webrtc_session_controller< 7.27.2
oracleenterprise_repository
oraclemanaged_file_transfer
oraclemanaged_file_transfer
oraclepeoplesoft_enterprise_peopletools
oraclepeoplesoft_enterprise_peopletools
oraclepeoplesoft_enterprise_peopletools
oracleretail_convenience_and_fuel_pos_software
oracleretail_xstore_point_of_service
oracleretail_xstore_point_of_service
oraclesoa_suite
oraclesoa_suite
oraclewebcenter_portal

CVSS provenance

nvdv3.07.5HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
osv7.5HIGH