Deserialization of Untrusted Data in Bouncy castle

緊急 9.8CVE-2018-1000613 · GHSA-4446-656p-f54g · 09/07/2018 公開 · 17/06/2026 更新

要点

CVE-2018-1000613 は org.bouncycastle:bcprov-jdk15on, bc-java (bouncycastle), api gateway (oracle) に影響する深刻度「緊急」 (CVSS 9.8) の脆弱性です。
今後30日間に悪用される確率（EPSS）：4.8%（全脆弱性の 91.9% より高い）。
対処：1.60, 7.0.0.1, 7.2 以降に更新してください。

パッケージ	影響を受けるバージョン	修正済みバージョン
org.bouncycastle:bcprov-jdk15on Maven	`≥ 1.57, < 1.60`	`1.60`
bc-java bouncycastle	`≥ 1.58, < 1.60`	`1.60`
api gateway oracle	`= 11.1.2.4.0`	修正版なし
banking platform oracle	`= 2.6.0= 2.6.1= 2.6.2`	修正版なし
business process management suite oracle	`= 11.1.1.9.0= 12.1.3.0.0= 12.2.1.3.0`	修正版なし
business transaction management oracle	`= 12.1.0`	修正版なし
communications application session controller oracle	`= 3.7.1= 3.8.0`	修正版なし
communications converged application server oracle	`= 7.0.0.1< 7.0.0.1`	`7.0.0.1`
communications convergence oracle	`= 3.0.2`	修正版なし
communications diameter signaling router oracle	`= 8.0.0= 8.1= 8.2= 8.2.1`	修正版なし
communications webrtc session controller oracle	`= 7.2< 7.2`	`7.2`
data integrator oracle	`= 12.2.1.3.0`	修正版なし
enterprise manager base platform oracle	`= 12.1.0.5.0= 13.2.0.0= 13.3.0.0`	修正版なし
enterprise manager for fusion middleware oracle	`= 13.2.0.0= 13.3.0.0`	修正版なし
enterprise repository oracle	`= 11.1.1.7.0= 12.1.3.0.0`	修正版なし
managed file transfer oracle	`= 12.1.3.0.0= 12.2.1.3.0`	修正版なし
peoplesoft enterprise peopletools oracle	`= 8.55= 8.56= 8.57`	修正版なし
retail convenience and fuel pos software oracle	`= 2.8.1`	修正版なし
retail xstore point of service oracle	`= 7.0= 7.1`	修正版なし
soa suite oracle	`= 12.1.3.0.0= 12.2.1.3.0`	修正版なし
utilities network management system oracle	`= 1.12.0.3= 2.3.0.0= 2.3.0.1= 2.3.0.2`	修正版なし
webcenter portal oracle	`= 11.1.1.9.0= 12.2.1.3.0`	修正版なし
weblogic server oracle	`= 12.2.1.3`	修正版なし

概要

Legion of the Bouncy Castle Java Cryptography APIs starting in version 1.57 and prior to version 1.60 contains a CWE-470: Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in XMSS/XMSS^MT private key deserialization that can result in Deserializing an XMSS/XMSS^MT private key can result in the execution of unexpected code. This attack appear to be exploitable via A handcrafted private key can include references to unexpected classes which will be picked up from the class path for the executing application.

This vulnerability appears to have been fixed in 1.60 and later.

NVD の説明

Legion of the Bouncy Castle Legion of the Bouncy Castle Java Cryptography APIs 1.58 up to but not including 1.60 contains a CWE-470: Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in XMSS/XMSS^MT private key deserialization that can result in Deserializing an XMSS/XMSS^MT private key can result in the execution of unexpected code. This attack appear to be exploitable via A handcrafted private key can include references to unexpected classes which will be picked up from the class path for the executing application. This vulnerability appears to have been fixed in 1.60 and later.

参考情報

org.bouncycastle:bcprov-jdk15on のその他の脆弱性

すべて見る →

これらの製品をお使いですか？サイトをスキャンして、脆弱なバージョンが公開されていないか確認しましょう。

無料でサイトをスキャン