Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
freebsdFreeBSDFE93803C-883F-11E8-9F0C-001B216D295B
HistoryJun 30, 2018 - 12:00 a.m.

Several Security Defects in the Bouncy Castle Crypto APIs

2018-06-3000:00:00
vuxml.freebsd.org
20

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.006 Low

EPSS

Percentile

77.5%

JSON

The Legion of the Bouncy Castle reports:

Release 1.60 is now available for download.
CVE-2018-1000180: issue around primality tests for RSA key pair
generation if done using only the low-level API.
CVE-2018-1000613: lack of class checking in deserialization
of XMSS/XMSS^MT private keys with BDS state information.

Related

ibm 15
nessus 15
fedora 3
openvas 9
github 2
veracode 2
prion 2
debian 1
cve 2
suse 4
osv 3
ubuntucve 2
redhatcve 2
debiancve 2
redhat 7
atlassian 2
mageia 1
oracle 6
ibm
ibm
Security Bulletin: Multiple vulnerabilities in Bouncy Castle API affect IBM License Metric Tool v9.
2020-04-03 08:05:51
Security Bulletin: Bouncy Castle as used by IBM QRadar SIEM contains multiple vulnerabilities (CVE-2018-1000613, CVE-2017-13098, CVE-2018-1000180)
2021-02-05 19:10:36
Security Bulletin: IBM Planning Analytics Workspace is affected by multiple vulnerabilities (CVE-2022-22968, CVE-2022-24785, CVE-2017-18214, CVE-2016-4055, CVE-2018-1000613, CVE-2020-15522, CVE-2018-1000180, CVE-2020-26939, CVE-2022-22314)
2022-09-06 19:57:58
nessus
nessus
FreeBSD : Several Security Defects in the Bouncy Castle Crypto APIs (fe93803c-883f-11e8-9f0c-001b216d295b)
2018-07-16 00:00:00
Fedora 28 : bouncycastle (2018-e6894349c9)
2019-01-03 00:00:00
openSUSE Security Update : bouncycastle (openSUSE-2018-794)
2018-08-06 00:00:00
fedora
fedora
[SECURITY] Fedora 28 Update: bouncycastle-1.60-1.fc28
2018-08-30 04:58:39
[SECURITY] Fedora 28 Update: bouncycastle-1.59-1.fc28
2018-06-18 16:20:10
[SECURITY] Fedora 27 Update: bouncycastle-1.59-1.fc27
2018-06-18 15:17:35
openvas
openvas
Fedora Update for bouncycastle FEDORA-2018-e6894349c9
2018-08-30 00:00:00
Debian: Security Advisory (DSA-4233-1)
2018-06-21 00:00:00
openSUSE: Security Advisory for bouncycastle (openSUSE-SU-2018:2820-1)
2018-09-25 00:00:00
github
github
Deserialization of Untrusted Data in Bouncy castle
2018-10-17 16:23:12
Bouncy Castle has a flaw in the Low-level interface to RSA key pair generator
2018-10-16 17:44:39
veracode
veracode
Weak Computation Of Iterations For MR Primality Test
2018-06-06 07:03:46
Remote Code Execution Via Deserialization
2018-07-16 04:44:10
prion
prion
Code injection
2018-06-05 13:29:00
Deserialization of untrusted data
2018-07-09 20:29:00
debian
debian
[SECURITY] [DSA 4233-1] bouncycastle security update
2018-06-22 19:59:24
cve
cve
CVE-2018-1000613
2018-07-09 20:29:00
CVE-2018-1000180
2018-06-05 13:29:00
suse
suse
Security update for bouncycastle (moderate)
2018-09-24 15:08:29
Security update for bouncycastle (moderate)
2018-08-03 21:09:02
Security update for bouncycastle (moderate)
2020-05-04 00:00:00
osv
osv
bouncycastle - security update
2018-06-22 00:00:00
Deserialization of Untrusted Data in Bouncy castle
2018-10-17 16:23:12
Bouncy Castle has a flaw in the Low-level interface to RSA key pair generator
2018-10-16 17:44:39
ubuntucve
ubuntucve
CVE-2018-1000180
2018-06-05 00:00:00
CVE-2018-1000613
2018-07-09 00:00:00
redhatcve
redhatcve
CVE-2018-1000613
2018-07-13 21:19:06
CVE-2018-1000180
2018-06-07 05:19:40
debiancve
debiancve
CVE-2018-1000613
2018-07-09 20:29:00
CVE-2018-1000180
2018-06-05 13:29:00
redhat
redhat
(RHSA-2018:2423) Important: Red Hat JBoss Enterprise Application Platform 7.1.4 on RHEL 6 security update
2018-08-15 11:19:15
(RHSA-2018:2425) Important: Red Hat JBoss Enterprise Application Platform 7.1 security update
2018-08-15 11:19:19
(RHSA-2018:2424) Important: Red Hat JBoss Enterprise Application Platform 7.1.4 on RHEL7 security update
2018-08-15 11:19:18
atlassian
atlassian
Update Atlassian Platform to 3.5.19 to fix CVE-2018-1000613, CVE-2019-17571 and other vulnerabilities
2021-02-03 22:39:15
Update Atlassian Platform to 3.5.19 to fix CVE-2018-1000613, CVE-2019-17571 and other vulnerabilities
2021-02-03 22:39:15
mageia
mageia
Updated bouncycastle packages fix security vulnerabilities
2018-09-21 02:17:55
oracle
oracle
Oracle Critical Patch Update Advisory - January 2019
2019-01-15 00:00:00
Oracle Critical Patch Update Advisory - April 2019
2019-04-16 00:00:00
Oracle Critical Patch Update Advisory - July 2019
2019-07-16 00:00:00

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.006 Low

EPSS

Percentile

77.5%

JSON
Related for FE93803C-883F-11E8-9F0C-001B216D295B
ibm15nessus15fedora3openvas9github2veracode2prion2debian1cve2suse4osv3ubuntucve2redhatcve2debiancve2redhat7atlassian2mageia1oracle6