CVE-2018-1000180: Bouncy Castle has a flaw in the Low-level interface to RSA key pair generator
(updated )
Bouncy Castle BC 1.54 - 1.59, BC-FJA 1.0.0, BC-FJA 1.0.1 and earlier have a flaw in the Low-level interface to RSA key pair generator, specifically RSA Key Pairs generated in low-level API with added certainty may have less M-R tests than expected. This appears to be fixed in versions BC 1.60 beta 4 and later, BC-FJA 1.0.2 and later.
References
- access.redhat.com/errata/RHSA-2018:2423
- access.redhat.com/errata/RHSA-2018:2424
- access.redhat.com/errata/RHSA-2018:2425
- access.redhat.com/errata/RHSA-2018:2428
- access.redhat.com/errata/RHSA-2018:2643
- access.redhat.com/errata/RHSA-2018:2669
- access.redhat.com/errata/RHSA-2019:0877
- github.com/advisories/GHSA-xqj7-j8j5-f2xr
- github.com/bcgit/bc-java/commit/22467b6e8fe19717ecdf201c0cf91bacf04a55ad
- github.com/bcgit/bc-java/commit/73780ac522b7795fc165630aba8d5f5729acc839
- github.com/bcgit/bc-java/wiki/CVE-2018-1000180
- lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451@%3Csolr-user.lucene.apache.org%3E
- nvd.nist.gov/vuln/detail/CVE-2018-1000180
- security.netapp.com/advisory/ntap-20190204-0003
- www.bountysource.com/issues/58293083-rsa-key-generation-computation-of-iterations-for-mr-primality-test
- www.debian.org/security/2018/dsa-4233
- www.oracle.com/security-alerts/cpuApr2021.html
- www.oracle.com/security-alerts/cpuapr2020.html
- www.oracle.com/security-alerts/cpuoct2020.html
- www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
- www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
- www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
Code Behaviors & Features
Detect and mitigate CVE-2018-1000180 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →