CVE-2016-1000340

bouncycastle: Carry propagation bug in math.raw.Nat??? class

Published Jun 4, 2018 CVSS 3.0 · 7.5 High EPSS 2.3% KEV · Not listed
Description
In the Bouncy Castle JCE Provider versions 1.51 to 1.55, a carry propagation bug was introduced in the implementation of squaring for several raw math classes have been fixed (org.bouncycastle.math.raw.Nat???). These classes are used by our custom elliptic curve implementations (org.bouncycastle.math.ec.custom.**), so there was the possibility of rare (in general usage) spurious calculations for elliptic curve scalar multiplications. Such errors would have been detected with high probability by the output validation for our scalar multipliers.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2018-0679 The Bouncy Castle JCE Provider carry a propagation bug
Github GHSA Github GHSA GHSA-r97x-3g8f-gx3m The Bouncy Castle JCE Provider carry a propagation bug
History
Type Values Removed Values Added
First Time appeared Bouncycastle bc-java
CPEs cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:*:*:*:*:*:*:*:* cpe:2.3:a:bouncycastle:bc-java:*:*:*:*:*:*:*:*
Vendors & Products Bouncycastle legion-of-the-bouncy-castle-java-crytography-api
Bouncycastle bc-java
Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 6, 2024, 3:55 AM
Reserved
Jun 4, 2018, 12:00 AM
Status
Modified
Published
Jun 4, 2018, 1:29 PM
Modified
Jun 17, 2026, 12:38 AM
Severity
Low
Public date
Jun 7, 2018, 12:00 AM