CVEvulnerability

CVE-2018-1000613

9.8 CRITICAL Published 2018-07-09 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-07-09
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-470

Description

Legion of the Bouncy Castle Legion of the Bouncy Castle Java Cryptography APIs 1.58 up to but not including 1.60 contains a CWE-470: Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in XMSS/XMSS^MT private key deserialization that can result in Deserializing an XMSS/XMSS^MT private key can result in the execution of unexpected code. This attack appear to be exploitable via A handcrafted private key can include references to unexpected classes which will be picked up from the class path for the executing application. This vulnerability appears to have been fixed in 1.60 and later.

Affected configurations

• bouncycastle bc-java (>= 1.58 < 1.60) • netapp oncommand workflow automation • opensuse leap 15.1 • oracle api gateway 11.1.2.4.0 • oracle banking platform 2.6.0 • oracle banking platform 2.6.1 • oracle banking platform 2.6.2 • oracle business process management suite 11.1.1.9.0 • oracle business process management suite 12.1.3.0.0 • oracle business process management suite 12.2.1.3.0 • oracle business transaction management 12.1.0 • oracle communications application session controller 3.7.1 • oracle communications application session controller 3.8.0 • oracle communications converged application server (< 7.0.0.1) • oracle communications converged application server 7.0.0.1 • oracle communications convergence 3.0.2 • oracle communications diameter signaling router 8.0.0 • oracle communications diameter signaling router 8.1 • oracle communications diameter signaling router 8.2 • oracle communications diameter signaling router 8.2.1 • oracle communications webrtc session controller (< 7.2) • oracle communications webrtc session controller 7.2 • oracle data integrator 12.2.1.3.0 • oracle enterprise manager base platform 12.1.0.5.0 • oracle enterprise manager base platform 13.2.0.0 • oracle enterprise manager base platform 13.3.0.0 • oracle enterprise manager for fusion middleware 13.2.0.0 • oracle enterprise manager for fusion middleware 13.3.0.0 • oracle enterprise repository 11.1.1.7.0 • oracle enterprise repository 12.1.3.0.0 • oracle managed file transfer 12.1.3.0.0 • oracle managed file transfer 12.2.1.3.0 • oracle peoplesoft enterprise peopletools 8.55 • oracle peoplesoft enterprise peopletools 8.56 • oracle peoplesoft enterprise peopletools 8.57 • oracle retail convenience and fuel pos software 2.8.1 • oracle retail xstore point of service 7.0 • oracle retail xstore point of service 7.1 • oracle soa suite 12.1.3.0.0 • oracle soa suite 12.2.1.3.0 • oracle utilities network management system 1.12.0.3 • oracle utilities network management system 2.3.0.0 • oracle utilities network management system 2.3.0.1 • oracle utilities network management system 2.3.0.2 • oracle webcenter portal 11.1.1.9.0 • oracle webcenter portal 12.2.1.3.0 • oracle weblogic server 12.2.1.3

Related

Weakness · CWE (1)

  • CWE-470 Use of Externally-Controlled Input to Select Classes or Code weakness

Referenced by CWE · observed example (4)

  • CWE-470 Use of Externally-Controlled Input to Select Classes or Code weakness
  • CWE-610 Externally Controlled Reference to a Resource in Another Sphere weakness
  • CWE-664 Improper Control of a Resource Through its Lifetime weakness
  • CWE-913 Improper Control of Dynamically-Managed Code Resources weakness

References