CVE-2018-1000180

moderate-risk

Published 2018-06-05

Bouncy Castle BC 1.54 - 1.59, BC-FJA 1.0.0, BC-FJA 1.0.1 and earlier have a flaw in the Low-level interface to RSA key pair generator, specifically RSA Key Pairs generated in low-level API with added certainty may have less M-R tests than expected. This appears to be fixed in versions BC 1.60 beta 4 and later, BC-FJA 1.0.2 and later.

Do I need to act?

0.28% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 7.5/10 High

NETWORK / LOW complexity

Affected Products (20)

Bc-Java

Fips Java Api

Debian Linux

Api Gateway

Business Process Management Suite

Business Transaction Management

Communications Application Session Controller

Communications Converged Application Server

Communications Webrtc Session Controller

Enterprise Repository

Managed File Transfer

Peoplesoft Enterprise Peopletools

Retail Convenience And Fuel Pos Software

Retail Xstore Point Of Service

Affected Vendors

Debian Redhat Oracle Netapp Bouncycastle

References (42)

Third Party Advisory http://www.securityfocus.com/bid/106567

Third Party Advisory https://access.redhat.com/errata/RHSA-2018:2423

Third Party Advisory https://access.redhat.com/errata/RHSA-2018:2424

Third Party Advisory https://access.redhat.com/errata/RHSA-2018:2425

Third Party Advisory https://access.redhat.com/errata/RHSA-2018:2428

Third Party Advisory https://access.redhat.com/errata/RHSA-2018:2643

Third Party Advisory https://access.redhat.com/errata/RHSA-2018:2669

Third Party Advisory https://access.redhat.com/errata/RHSA-2019:0877

Patch https://github.com/bcgit/bc-java/commit/22467b6e8fe19717ecdf201c0cf91bacf04a55ad

Patch https://github.com/bcgit/bc-java/commit/73780ac522b7795fc165630aba8d5f5729acc839

https://github.com/bcgit/bc-java/wiki/CVE-2018-1000180

https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c24...

Patch https://security.netapp.com/advisory/ntap-20190204-0003/

Third Party Advisory https://www.bountysource.com/issues/58293083-rsa-key-generation-computation-of-i...

Third Party Advisory https://www.debian.org/security/2018/dsa-4233

https://www.oracle.com/security-alerts/cpuApr2021.html

https://www.oracle.com/security-alerts/cpuapr2020.html

https://www.oracle.com/security-alerts/cpuoct2020.html

Patch https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html

Patch https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html

and 22 more references

/ 100

moderate-risk

Severity 26/34 · High

Exploitability 1/34 · Minimal

Exposure 22/34 · High