EUVD-2018-0660

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Bouncy Castle JCE Provider flaw allows invalid ECDSA signatures to pass verification, risking data integrity.

Reporter	Title	Published	Views	Family All 63
IBM Security Bulletins	Security Bulletin: Multiple Bouncy Castle Vulnerabilities Affect IBM Sterling B2B Integrator	13 Nov 202019:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium Big Data Intelligence is affected by a Using Components with Known Vulnerabilities vulnerability	14 Oct 201916:59	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in The Bouncy Castle Crypto Package For Java affect IBM Application Performance Management products	25 Sep 202309:11	–	ibm
IBM Security Bulletins	Security Bulletin: Bouncy Castle Vulnerabilities Affect IBM Sterling B2B Integrator	6 Oct 202114:43	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Bouncy Castle affects Apache Solr shipped with IBM Operations Analytics - Log Analysis	16 Apr 202115:46	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM webMethods B2B	25 Apr 202510:49	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling File Gateway is vulnerable to multiple issues due to Bouncy Castle	14 Oct 202221:58	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Bouncy Castle, Eclipse JGit and Node.js diff might affect IBM Storage Defender Copy Data Management	26 Sep 202518:33	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Guardium Data Encryption (GDE)	24 Aug 202010:03	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities in IBM Sterling Partner Engagement Manager	12 Mar 202614:42	–	ibm

[
  {
    "enisaIdVendor": [
      {
        "id": "ac9645d3-31e9-3ad5-aaea-d5c3b7813bf8",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "01be9c67-273d-3371-9b02-0b4609257829",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2016-1000342
github	www.github.com/bcgit/bc-java/commit/843c2e60f67d71faf81d236f448ebbe56c62c647
access	www.access.redhat.com/errata/RHSA-2018:2669
access	www.access.redhat.com/errata/RHSA-2018:2927
github	www.github.com/advisories/GHSA-qcj7-g2j5-g7r3
github	www.github.com/bcgit/bc-java
lists	www.lists.debian.org/debian-lts-announce/2018/07/msg00009.html
security	www.security.netapp.com/advisory/ntap-20181127-0004
usn	www.usn.ubuntu.com/3727-1
oracle	www.oracle.com/security-alerts/cpuoct2020.html

07 Oct 2025 00:30Current

7.6High risk

Vulners AI Score7.6

CVSS 37.5

CVSS 25

EPSS0.00471