GitHub Advisoryadvisory · Maven

GHSA-4vhj-98r6-424h In Bouncy Castle JCE Provider it is possible to inject extra elements in the sequence making up the signature and still have it validate

HIGH Published 2018-10-17 Modified 2025-09-12 Official page ↗
Aliases
CVE-2016-1000338
Ecosystem
Maven
Packages
org.bouncycastle:bcprov-jdk14, org.bouncycastle:bcprov-jdk15, org.bouncycastle:bcprov-jdk15on
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Weaknesses
CWE-347
Reviewed
2020-06-16

Affected packages

• Maven org.bouncycastle:bcprov-jdk14: >= 1.38, < 1.56 → fixed in 1.56 • Maven org.bouncycastle:bcprov-jdk15: >= 1.38, < 1.56 → fixed in 1.56 • Maven org.bouncycastle:bcprov-jdk15on: >= 1.38, < 1.56 → fixed in 1.56

Description

In Bouncy Castle JCE Provider version 1.55 and earlier the DSA does not fully validate ASN.1 encoding of signature on verification. It is possible to inject extra elements in the sequence making up the signature and still have it validate, which in some cases may allow the introduction of 'invisible' data into a signed structure.

Related

Alias · CVE (1)

  • CVE-2016-1000338 In Bouncy Castle JCE Provider version 1.55 and earlier the DSA does not fully validate ASN.1 encoding of signature on verification. vulnerability

Weakness · CWE (1)

  • CWE-347 Improper Verification of Cryptographic Signature weakness

References