ByteOS Network

NVD Vulnerability Details :

CVE-2016-1000346

Modified

Source-cve@mitre.org

Published At-04 Jun, 2018 | 21:29

Updated At-12 May, 2025 | 17:37

In the Bouncy Castle JCE Provider version 1.55 and earlier the other party DH public key is not fully validated. This can cause issues as invalid keys can be used to reveal details about the other party's private key where static Diffie-Hellman is in use. As of release 1.56 the key parameters are checked on agreement calculation.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	3.7	LOW	CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Primary	2.0	4.3	MEDIUM	AV:N/AC:M/Au:N/C:P/I:N/A:N

CPE Matches

bouncycastle>>bc-java>>Versions up to 1.55(inclusive)

cpe:2.3:a:bouncycastle:bc-java:*:*:*:*:*:*:*:*

Debian GNU/Linux

>>debian_linux>>8.0

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-320	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
https://access.redhat.com/errata/RHSA-2018:2669	cve@mitre.org	N/A
https://access.redhat.com/errata/RHSA-2018:2927	cve@mitre.org	N/A
https://github.com/bcgit/bc-java/commit/1127131c89021612c6eefa26dbe5714c194e7495#diff-d525a20b8acaed791ae2f0f770eb5937	cve@mitre.org	Patch Third Party Advisory
https://lists.debian.org/debian-lts-announce/2018/07/msg00009.html	cve@mitre.org	Third Party Advisory
https://security.netapp.com/advisory/ntap-20181127-0004/	cve@mitre.org	N/A
https://usn.ubuntu.com/3727-1/	cve@mitre.org	N/A
https://www.oracle.com/security-alerts/cpuoct2020.html	cve@mitre.org	N/A
https://access.redhat.com/errata/RHSA-2018:2669	af854a3a-2127-422b-91ae-364da2661108	N/A
https://access.redhat.com/errata/RHSA-2018:2927	af854a3a-2127-422b-91ae-364da2661108	N/A
https://github.com/bcgit/bc-java/commit/1127131c89021612c6eefa26dbe5714c194e7495#diff-d525a20b8acaed791ae2f0f770eb5937	af854a3a-2127-422b-91ae-364da2661108	Patch Third Party Advisory
https://lists.debian.org/debian-lts-announce/2018/07/msg00009.html	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://security.netapp.com/advisory/ntap-20181127-0004/	af854a3a-2127-422b-91ae-364da2661108	N/A
https://usn.ubuntu.com/3727-1/	af854a3a-2127-422b-91ae-364da2661108	N/A
https://www.oracle.com/security-alerts/cpuoct2020.html	af854a3a-2127-422b-91ae-364da2661108	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History