Lucene search

CVE-2016-1000338

🗓️ 01 Jun 2018 20:00:29Reported by [email protected]Type

In Bouncy Castle JCE Provider version 1.55 and earlier, DSA does not fully validate ASN.1 encoding of signature on verification, allowing injection of extra elements in the signature sequence

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 42
OSV	GHSA-4VHJ-98R6-424H In Bouncy Castle JCE Provider it is possible to inject extra elements in the sequence making up the signature and still have it validate	17 Oct 201816:23	–	osv
OSV	UBUNTU-CVE-2016-1000338	1 Jun 201800:00	–	osv
OSV	CVE-2016-1000338	1 Jun 201820:29	–	osv
OSV	DLA-1418-1 bouncycastle - security update	7 Jul 201800:00	–	osv
OSV	USN-3727-1 bouncycastle vulnerabilities	1 Aug 201814:56	–	osv
OSV	MGASA-2018-0376 Updated bouncycastle packages fix security vulnerabilities	20 Sep 201823:17	–	osv
OSV	OPENSUSE-SU-2024:10661-1 bouncycastle-1.68-3.2 on GA media	15 Jun 202400:00	–	osv
OSV	RHSA-2018:2927 Red Hat Security Advisory: Satellite 6.4 security, bug fix, and enhancement update	30 Sep 202416:25	–	osv
Cvelist	CVE-2016-1000338	1 Jun 201800:00	–	cvelist
UbuntuCve	CVE-2016-1000338	1 Jun 201800:00	–	ubuntucve

Nvd

Node

bouncycastle legion-of-the-bouncy-castle-java-crytography-apiRange1.38–1.56

Node

redhat satelliteMatch6.4-

redhat satellite_capsuleMatch6.4

canonical ubuntu_linuxMatch14.04

Node

netapp 7-mode_transition_toolMatch-

Source	Link
security	www.security.netapp.com/advisory/ntap-20231006-0011/
oracle	www.oracle.com/security-alerts/cpuoct2020.html
usn	www.usn.ubuntu.com/3727-1/
access	www.access.redhat.com/errata/RHSA-2018:2927
github	www.github.com/bcgit/bc-java/commit/b0c3ce99d43d73a096268831d0d120ffc89eac7f
lists	www.lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451%40%3Csolr-user.lucene.apache.org%3E
lists	www.lists.debian.org/debian-lts-announce/2018/07/msg00009.html
access	www.access.redhat.com/errata/RHSA-2018:2669

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

01 Jun 2018 20:29Current

6.5Medium risk

Vulners AI Score6.5

CVSS25

CVSS37.5

EPSS0.00329

CWE-347