CVE-2018-1000180
- Source
- https://cve.org/CVERecord?id=CVE-2018-1000180
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-1000180.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2018-1000180
- Aliases
- Downstream
- Related
- Published
- 2018-06-05T13:29:00Z
- Modified
- 2026-08-07T14:54:03Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
- Summary
- [none]
- Details
-
Bouncy Castle BC 1.54 - 1.59, BC-FJA 1.0.0, BC-FJA 1.0.1 and earlier have a flaw in the Low-level interface to RSA key pair generator, specifically RSA Key Pairs generated in low-level API with added certainty may have less M-R tests than expected. This appears to be fixed in versions BC 1.60 beta 4 and later, BC-FJA 1.0.2 and later.
- Database specific
{ "unresolved_ranges": [ { "cpes": [ "cpe:2.3:a:bouncycastle:fips_java_api:*:*:*:*:*:*:*:*" ], "extracted_events": [ { "last_affected": "1.0.1" } ], "source": "CPE_RANGE", "vendor_product": "bouncycastle:fips_java_api" }, { "cpes": [ "cpe:2.3:a:oracle:communications_converged_application_server:*:*:*:*:*:*:*:*" ], "extracted_events": [ { "fixed": "7.0.0.1" } ], "source": "CPE_RANGE", "vendor_product": "oracle:communications_converged_application_server" }, { "cpes": [ "cpe:2.3:a:oracle:communications_webrtc_session_controller:*:*:*:*:*:*:*:*" ], "extracted_events": [ { "fixed": "7.2" } ], "source": "CPE_RANGE", "vendor_product": "oracle:communications_webrtc_session_controller" }, { "cpes": [ "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*" ], "extracted_events": [ { "introduced": "9.0" }, { "last_affected": "9.0" } ], "source": "CPE_STRING", "vendor_product": "debian:debian_linux" }, { "cpes": [ "cpe:2.3:a:oracle:api_gateway:11.1.2.4.0:*:*:*:*:*:*:*" ], "extracted_events": [ { "introduced": "11.1.2.4.0" }, { "last_affected": "11.1.2.4.0" } ], "source": "CPE_STRING", "vendor_product": "oracle:api_gateway" }, { "cpes": [ "cpe:2.3:a:oracle:business_process_management_suite:11.1.1.9.0:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:business_process_management_suite:12.1.3.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:business_process_management_suite:12.2.1.3.0:*:*:*:*:*:*:*" ], "extracted_events": [ { "introduced": "11.1.1.9.0" }, { "last_affected": "11.1.1.9.0" }, { "introduced": "12.1.3.0.0" }, { "last_affected": "12.1.3.0.0" }, { "introduced": "12.2.1.3.0" }, { "last_affected": "12.2.1.3.0" } ], "source": "CPE_STRING", "vendor_product": "oracle:business_process_management_suite" }, { "cpes": [ "cpe:2.3:a:oracle:business_transaction_management:12.1.0:*:*:*:*:*:*:*" ], "extracted_events": [ { "introduced": "12.1.0" }, { "last_affected": "12.1.0" } ], "source": "CPE_STRING", "vendor_product": "oracle:business_transaction_management" }, { "cpes": [ "cpe:2.3:a:oracle:communications_application_session_controller:3.7.1:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:communications_application_session_controller:3.8.0:*:*:*:*:*:*:*" ], "extracted_events": [ { "introduced": "3.7.1" }, { "last_affected": "3.7.1" }, { "introduced": "3.8.0" }, { "last_affected": "3.8.0" } ], "source": "CPE_STRING", "vendor_product": "oracle:communications_application_session_controller" }, { "cpes": [ "cpe:2.3:a:oracle:enterprise_repository:12.1.3.0.0:*:*:*:*:*:*:*" ], "extracted_events": [ { "introduced": "12.1.3.0.0" }, { "last_affected": "12.1.3.0.0" } ], "source": "CPE_STRING", "vendor_product": "oracle:enterprise_repository" }, { "cpes": [ "cpe:2.3:a:oracle:managed_file_transfer:12.1.3.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:managed_file_transfer:12.2.1.3.0:*:*:*:*:*:*:*" ], "extracted_events": [ { "introduced": "12.1.3.0.0" }, { "last_affected": "12.1.3.0.0" }, { "introduced": "12.2.1.3.0" }, { "last_affected": "12.2.1.3.0" } ], "source": "CPE_STRING", "vendor_product": "oracle:managed_file_transfer" }, { "cpes": [ "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.56:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57:*:*:*:*:*:*:*" ], "extracted_events": [ { "introduced": "8.55" }, { "last_affected": "8.55" }, { "introduced": "8.56" }, { "last_affected": "8.56" }, { "introduced": "8.57" }, { "last_affected": "8.57" } ], "source": "CPE_STRING", "vendor_product": "oracle:peoplesoft_enterprise_peopletools" }, { "cpes": [ "cpe:2.3:a:oracle:retail_convenience_and_fuel_pos_software:2.8.1:*:*:*:*:*:*:*" ], "extracted_events": [ { "introduced": "2.8.1" }, { "last_affected": "2.8.1" } ], "source": "CPE_STRING", "vendor_product": "oracle:retail_convenience_and_fuel_pos_software" }, { "cpes": [ "cpe:2.3:a:oracle:retail_xstore_point_of_service:7.0:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:retail_xstore_point_of_service:7.1:*:*:*:*:*:*:*" ], "extracted_events": [ { "introduced": "7.0" }, { "last_affected": "7.0" }, { "introduced": "7.1" }, { "last_affected": "7.1" } ], "source": "CPE_STRING", "vendor_product": "oracle:retail_xstore_point_of_service" }, { "cpes": [ "cpe:2.3:a:oracle:soa_suite:12.1.3.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:soa_suite:12.2.1.3.0:*:*:*:*:*:*:*" ], "extracted_events": [ { "introduced": "12.1.3.0.0" }, { "last_affected": "12.1.3.0.0" }, { "introduced": "12.2.1.3.0" }, { "last_affected": "12.2.1.3.0" } ], "source": "CPE_STRING", "vendor_product": "oracle:soa_suite" }, { "cpes": [ "cpe:2.3:a:oracle:webcenter_portal:11.1.1.9.0:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:webcenter_portal:12.2.1.3.0:*:*:*:*:*:*:*" ], "extracted_events": [ { "introduced": "11.1.1.9.0" }, { "last_affected": "11.1.1.9.0" }, { "introduced": "12.2.1.3.0" }, { "last_affected": "12.2.1.3.0" } ], "source": "CPE_STRING", "vendor_product": "oracle:webcenter_portal" }, { "cpes": [ "cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:*" ], "extracted_events": [ { "introduced": "12.1.3.0.0" }, { "last_affected": "12.1.3.0.0" } ], "source": "CPE_STRING", "vendor_product": "oracle:weblogic_server" }, { "cpes": [ "cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.1.0:*:*:*:*:*:*:*" ], "extracted_events": [ { "introduced": "7.1.0" }, { "last_affected": "7.1.0" } ], "source": "CPE_STRING", "vendor_product": "redhat:jboss_enterprise_application_platform" }, { "cpes": [ "cpe:2.3:o:redhat:virtualization:4.2:*:*:*:*:*:*:*" ], "extracted_events": [ { "introduced": "4.2" }, { "last_affected": "4.2" } ], "source": "CPE_STRING", "vendor_product": "redhat:virtualization" } ] }- References
-
- https://github.com/bcgit/bc-java/wiki/CVE-2018-1000180
- https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451%40%3Csolr-user.lucene.apache.org%3E
- https://www.oracle.com/security-alerts/cpuApr2021.html
- https://www.oracle.com/security-alerts/cpuapr2020.html
- https://www.oracle.com/security-alerts/cpuoct2020.html
- http://www.securityfocus.com/bid/106567
- https://access.redhat.com/errata/RHSA-2018:2423
- https://access.redhat.com/errata/RHSA-2018:2424
- https://access.redhat.com/errata/RHSA-2018:2425
- https://access.redhat.com/errata/RHSA-2018:2428
- https://access.redhat.com/errata/RHSA-2018:2643
- https://access.redhat.com/errata/RHSA-2018:2669
- https://access.redhat.com/errata/RHSA-2019:0877
- https://www.bountysource.com/issues/58293083-rsa-key-generation-computation-of-iterations-for-mr-primality-test
- https://www.debian.org/security/2018/dsa-4233
- https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
- https://github.com/bcgit/bc-java/commit/22467b6e8fe19717ecdf201c0cf91bacf04a55ad
- https://github.com/bcgit/bc-java/commit/73780ac522b7795fc165630aba8d5f5729acc839
- https://security.netapp.com/advisory/ntap-20190204-0003/
- https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
- https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
Affected packages
Git / github.com/bcgit/bc-java
Affected ranges
- Type
- GIT
- Repo
- https://github.com/bcgit/bc-java
- Events
-
IntroducedLast AffectedFixedFixed
- Database specific
-
Show details
{ "cpe": "cpe:2.3:a:bouncycastle:bc-java:*:*:*:*:*:*:*:*", "extracted_events": [ { "introduced": "1.54" }, { "last_affected": "1.59" } ], "source": [ "CPE_RANGE", "REFERENCES" ] }
Database specific
source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-1000180.json"
vanir_signatures
[
{
"deprecated": false,
"digest": {
"line_hashes": [
"257698838932714443289646009555494598341",
"289848681659626294251947604395719801481",
"156915566116362155606891889355124502872",
"26895649160699150255602757069596481226",
"220811889832895347815946836515128187770",
"47045332555838027236932019877537168760",
"22919438933150866736858579667051393581",
"143814390065555812665951859181297093884",
"237451756451439053358303576206498505327",
"277246556836375319833842980669284337346",
"130689352777683059142271724779473551753",
"336435536837793534198724193478017402442",
"17704946286379027993761977778742095203",
"260155809973710943641365639216995634088",
"7377602204838434508197526472147943878",
"187118732279990443988316599001482697228",
"214681161194493830139928104179165807571",
"250657119348606598417294254264344680167",
"144151817570865529575959812164844930523",
"90485390753289015655808852128637265999"
],
"threshold": 0.9
},
"id": "CVE-2018-1000180-4be11a56",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/bcgit/bc-java/commit/73780ac522b7795fc165630aba8d5f5729acc839",
"target": {
"file": "core/src/main/java/org/bouncycastle/crypto/generators/RSAKeyPairGenerator.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "26046904150781172814100366087529876009",
"length": 160
},
"id": "CVE-2018-1000180-5e3a00a7",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/bcgit/bc-java/commit/73780ac522b7795fc165630aba8d5f5729acc839",
"target": {
"file": "core/src/main/java/org/bouncycastle/crypto/generators/RSAKeyPairGenerator.java",
"function": "init"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "48298570206855095622110672320160068254",
"length": 525
},
"id": "CVE-2018-1000180-81d64e88",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/bcgit/bc-java/commit/73780ac522b7795fc165630aba8d5f5729acc839",
"target": {
"file": "core/src/main/java/org/bouncycastle/crypto/generators/RSAKeyPairGenerator.java",
"function": "chooseRandomPrime"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "315724511571408902034389038163610651938",
"length": 140
},
"id": "CVE-2018-1000180-81d898a1",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/bcgit/bc-java/commit/73780ac522b7795fc165630aba8d5f5729acc839",
"target": {
"file": "core/src/main/java/org/bouncycastle/crypto/generators/RSAKeyPairGenerator.java",
"function": "isProbablePrime"
}
}
]
vanir_signatures_modified
"2026-08-07T14:54:03Z"