Bouncy Castle JCE Provider up to 1.55 Elliptic Curve data processing

Summaryinfo

A vulnerability has been found in Bouncy Castle JCE Provider 1.51/1.52/1.53/1.54/1.55 and classified as critical. Affected is an unknown function of the component Elliptic Curve Handler. Performing a manipulation results in data processing. This vulnerability is identified as CVE-2016-1000340. The attack can be initiated remotely. There is not any exploit available. The affected component should be upgraded.

Detailsinfo

A vulnerability, which was classified as critical, was found in Bouncy Castle JCE Provider 1.51/1.52/1.53/1.54/1.55. This affects an unknown part of the component Elliptic Curve Handler. The manipulation with an unknown input leads to a data processing vulnerability. CWE is classifying the issue as CWE-19. This is going to have an impact on integrity. The summary by CVE is:

In the Bouncy Castle JCE Provider versions 1.51 to 1.55, a carry propagation bug was introduced in the implementation of squaring for several raw math classes have been fixed (org.bouncycastle.math.raw.Nat???). These classes are used by our custom elliptic curve implementations (org.bouncycastle.math.ec.custom.**), so there was the possibility of rare (in general usage) spurious calculations for elliptic curve scalar multiplications. Such errors would have been detected with high probability by the output validation for our scalar multipliers.

The bug was discovered 07/07/2018. The weakness was released 06/04/2018 (GitHub Repository). The advisory is shared at github.com. This vulnerability is uniquely identified as CVE-2016-1000340 since 06/04/2018. The exploitability is told to be easy. It is possible to initiate the attack remotely. No form of authentication is needed for exploitation. Neither technical details nor an exploit are publicly available.

The vulnerability scanner Nessus provides a plugin with the ID 110530 (openSUSE Security Update : bouncycastle (openSUSE-2018-628)), which helps to determine the existence of the flaw in a target environment. It is assigned to the family SuSE Local Security Checks and running in the context l. The commercial vulnerability scanner Qualys is able to test this issue with plugin 171315 (OpenSUSE Security Update for bouncycastle (openSUSE-SU-2018:1689-1)).

Upgrading eliminates this vulnerability. A possible mitigation has been published 2 weeks after the disclosure of the vulnerability.

The vulnerability is also documented in the databases at Tenable (110530) and EUVD (EUVD-2018-0679). Entries connected to this vulnerability are available at VDB-118820, VDB-118822, VDB-118823 and VDB-118824. If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Vendor

• Bouncy Castle

Name

• JCE Provider

Version

• 1.51
• 1.52
• 1.53
• 1.54
• 1.55

License

• open-source

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion