Lucene search
PRIOn knowledge basePRION:CVE-2016-1000340HistoryJun 04, 2018 - 1:29 p.m.
Input validation
2018-06-0413:29:00
PRIOn knowledge base
www.prio-n.com
8
In the Bouncy Castle JCE Provider versions 1.51 to 1.55, a carry propagation bug was introduced in the implementation of squaring for several raw math classes have been fixed (org.bouncycastle.math.raw.Nat???). These classes are used by our custom elliptic curve implementations (org.bouncycastle.math.ec.custom.**), so there was the possibility of rare (in general usage) spurious calculations for elliptic curve scalar multiplications. Such errors would have been detected with high probability by the output validation for our scalar multipliers.
Related
veracode
veracode
Carry Propagation
2017-01-16 03:22:52
github
github
The Bouncy Castle JCE Provider carry a propagation bug
2018-10-17 16:23:50
cvelist
cvelist
CVE-2016-1000340
2018-06-04 13:00:00
redhatcve
redhatcve
CVE-2016-1000340
2018-06-07 18:19:22
debiancve
debiancve
CVE-2016-1000340
2018-06-04 13:29:00
nvd
nvd
CVE-2016-1000340
2018-06-04 13:29:00
ubuntucve
ubuntucve
CVE-2016-1000340
2018-06-04 00:00:00
cve
cve
CVE-2016-1000340
2018-06-04 13:29:00
osv
osv
The Bouncy Castle JCE Provider carry a propagation bug
2018-10-17 16:23:50
suse
suse
Security update for bouncycastle (moderate)
2018-06-14 12:07:50
openvas
openvas
openSUSE: Security Advisory for bouncycastle (openSUSE-SU-2018:1689-1)
2018-06-15 00:00:00
Mageia: Security Advisory (MGASA-2018-0376)
2022-01-28 00:00:00
nessus
nessus
openSUSE Security Update : bouncycastle (openSUSE-2018-628)
2018-06-14 00:00:00
RHEL 7 : Satellite Server (RHSA-2018:2927)
2018-10-18 00:00:00
ibm
ibm
mageia
mageia
Updated bouncycastle packages fix security vulnerabilities
2018-09-21 02:17:55
redhat
redhat
(RHSA-2018:2669) Important: Fuse 7.1 security update
2018-09-11 07:52:48
oracle
oracle
Oracle Critical Patch Update Advisory - October 2020
2020-10-20 00:00:00