Improper verification of cryptographic signature in Bouncy Castle for Java - CVE-2016-1000342
Published: July 5, 2018
Vulnerability identifier: #VU13590
CSH Severity: Low
CVSS v4: 5.3 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2016-1000342
CWE-ID: CWE-347
Exploitation vector: Adjecent network
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to bypass signature validation process.
The JCE Provider in Bouncy Castle does not fully validate ASN.1 encoding of signature on verification within ECDSA implementation. A remote attacker can inject extra elements in the sequence making up the signature, which will be considered valid allowing an attacker to add extra data into a signed structure.
Affected software
Bouncy Castle for Java
Dell Secure Connect Gateway
IBM Cloud Application Performance Management (APM)
IBM Sterling File Gateway
Fuse
Dell Secure Connect Gateway
IBM Cloud Application Performance Management (APM)
IBM Sterling File Gateway
Fuse
How to mitigate CVE-2016-1000342
Install updates from vendor's website.
Dell Secure Connect Gateway - update to 5.26.00.18
IBM Sterling File Gateway - addressed in versions 6.0.3.7, 6.1.0.5, 6.1.1.2, 6.1.2.0
Fuse - update to 7.1.0
IBM Cloud Application Performance Management (APM) - update to 8.1.4.0.14
IBM Sterling File Gateway - addressed in versions 6.0.3.7, 6.1.0.5, 6.1.1.2, 6.1.2.0
Fuse - update to 7.1.0
IBM Cloud Application Performance Management (APM) - update to 8.1.4.0.14