PT-2018-16936 · Legion Of The Bouncy Castle · Bouncy Castle

Published 2018-04-16 · Updated 2025-05-12 · CVE-2018-5382

Positive Technologies (AI Summary)

CVSS v3.1

4.4

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Bouncy Castle versions prior to 1.47

Description The default BKS keystore uses an HMAC that is only 16 bits long, which can allow an attacker to compromise the integrity of a BKS keystore. This issue applies to any BKS keystore generated prior to Bouncy Castle release 1.47. A new keystore type "BKS-V1" was introduced in version 1.49 for legacy reasons, but its use is discouraged by the library authors due to security concerns.

Recommendations For versions prior to 1.47, update to version 1.47 or later to use the new BKS format with a 160 bit HMAC. As a temporary workaround, consider avoiding the use of BKS keystores generated prior to version 1.47, especially in situations where the integrity of the keystore is crucial.

Fix

Use of a Broken Cryptographic Algorithm

Weakness Enumeration

CWE-327

CWE-354

Related Identifiers

CVE-2018-5382

GHSA-8477-3V39-GGPM

RHSA-2018:2927

Affected Products

Bouncy Castle

References · 15

• https://osv.dev/vulnerability/CVE-2018-5382 · Vendor Advisory
• https://bouncycastle.org/releasenotes.html · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-8477-3v39-ggpm · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2018-5382 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-5382 · Security Note
• https://access.redhat.com/errata/RHSA-2018:2927 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2018-5382 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2018-5382 · Security Note
• https://ubuntu.com/security/CVE-2018-5382 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-5382 · Vendor Advisory
• https://oracle.com/security-alerts/cpuoct2020.html · Note
• http://securityfocus.com/bid/103453 · Note
• https://t.me/cvenotify/121778 · Telegram Post
• https://insights.sei.cmu.edu/cert/2018/03/the-curious-case-of-the-bouncy-castle-bks-passwords.html · Note
• https://kb.cert.org/vuls/id/306792 · Note