CVE-2018-5382

🗓️ 16 Apr 2018 13:00:00Reported by certccType

The default BKS keystore uses a 16-bit HMAC, which can compromise integrity. Upgrade to Bouncy Castle release 1.47 for a 160-bit HMAC

Reporter	Title	Published	Views	Family All 27
IBM Security Bulletins	Security Bulletin: Public disclosed vulnerability from Bouncy Castle affects Platform PCM	24 Jun 201802:09	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium Big Data Intelligence is affected by a Using Components with Known Vulnerabilities vulnerability	14 Oct 201916:59	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Bouncy Castle Java Cryptography affect IBM Tivoli Business Manager	30 Sep 202116:09	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by a Bouncy Castle vulnerability	28 Sep 201804:30	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Guardium Data Encryption (GDE)	24 Aug 202010:03	–	ibm
IBM Security Bulletins	Security Bulletin: Public disclosed vulnerability from Bouncy Castle affects Platform HPC	24 Jun 201802:09	–	ibm
CNVD	Unspecified Vulnerability in Bouncy Castle BKS-V1	19 Apr 201800:00	–	cnvd
Cvelist	CVE-2018-5382 Bouncy Castle BKS-V1 keystore files vulnerable to trivial hash collisions	16 Apr 201813:00	–	cvelist
Debian CVE	CVE-2018-5382	16 Apr 201813:00	–	debiancve
EUVD	EUVD-2022-3099	3 Oct 202520:07	–	euvd

NVD

Node

bouncycastle bc-javaRange≤1.49

Node

redhat satelliteMatch6.4

redhat satellite_capsuleMatch6.4

[
  {
    "product": "Bouncy Castle",
    "vendor": "Legion of the Bouncy Castle",
    "versions": [
      {
        "lessThan": "1.47",
        "status": "affected",
        "version": "all",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
securityfocus	www.securityfocus.com/bid/103453
oracle	www.oracle.com/security-alerts/cpuoct2020.html
kb	www.kb.cert.org/vuls/id/306792
access	www.access.redhat.com/errata/RHSA-2018:2927
bouncycastle	www.bouncycastle.org/releasenotes.html

12 May 2025 17:37Current

4.9Medium risk

Vulners AI Score4.9

CVSS 23.6

CVSS 3.14.4

EPSS0.00153