Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2016-1000340 Details

Description

In the Bouncy Castle JCE Provider versions 1.51 to 1.55, a carry propagation bug was introduced in the implementation of squaring for several raw math classes have been fixed (org.bouncycastle.math.raw.Nat???). These classes are used by our custom elliptic curve implementations (org.bouncycastle.math.ec.custom.**), so there was the possibility of rare (in general usage) spurious calculations for elliptic curve scalar multiplications. Such errors would have been detected with high probability by the output validation for our scalar multipliers.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7.5 HIGHVector:CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://access.redhat.com/errata/RHSA-2018:2669 CVE
https://access.redhat.com/errata/RHSA-2018:2927 CVE
https://github.com/bcgit/bc-java/commit/790642084c4e0cadd47352054f868cc8397e2c00#diff-e5934feac8203ca0104ab291a3560a31 CVEPatchThird Party Advisory
https://security.netapp.com/advisory/ntap-20181127-0004/ CVE
https://www.oracle.com/security-alerts/cpuoct2020.html CVE

see all 10 references

Weakness Enumeration

CWE-IDCWE NameSource
CWE-19Data Processing Errors[email protected]

Affected Products

ProductVersions
bouncycastle bc-java
>= 1.51, <= 1.55

CPE

  • cpe:2.3:a:bouncycastle:bc-java:*:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

9 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2016-1000340
NVD Published Date:
Jun 4, 2018
NVD Last Modified:
Jun 17, 2026
Source:
[email protected]
CVE-2016-1000340 Details - Not Deferred