Security Update for Bouncy Castle Crypto Library
Summary
DSA-3417-1: bouncycastle - security update. Affects bouncycastle versions < 1.44+dfsg-3.1+deb7u1. Fixed in 1.44+dfsg-3.1+deb7u1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Bouncy Castle Crypto Library is a Java library that provides cryptographic algorithms and protocols for various applications. It is widely used in TLS servers and other cryptographic applications. However, a vulnerability has been discovered in the library that allows an attacker to recover private Elliptic Curve keys from affected applications.
Vulnerability Detail
The vulnerability, described in a paper by Tibor Jager, Jörg Schwenk, and Juraj Somorovsky, allows an attacker to perform an invalid curve attack on TLS-ECDH. By exploiting this vulnerability, an attacker can recover private Elliptic Curve keys used by different applications, including TLS servers. This can lead to unauthorized access, data leakage, and other security breaches.
How To Fix
Minimum fixed version
1.44+dfsg-3.1+deb7u1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade bouncycastleTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. The recommended solution is to upgrade the Bouncy Castle Crypto library to the patched version.
Conclusion
The Bouncy Castle Crypto library is vulnerable to an invalid curve attack that allows an attacker to recover private Elliptic Curve keys. To mitigate this vulnerability, it is recommended to upgrade to the patched versions of the library. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for bouncycastle →
FAQ
The vulnerability allows an attacker to recover private Elliptic Curve keys used by different applications, including TLS servers. This can lead to unauthorized access, data leakage, and other security breaches.
The vulnerability affects versions prior to 1.44+dfsg-3.1+deb7u1 for Debian 7 (wheezy), versions prior to 1.49+dfsg-3+deb8u1 for Debian 8 (jessie), and versions prior to 1.51-2 for Debian unstable (sid).
There are no known exploits for this vulnerability at the time of this report. However, it is important to apply the recommended patch to mitigate the risk.
You can use Vulert's playground (https://vulert.com/scanner) to check if your application is affected by this vulnerability. Vulert uses a manifest file like package-lock.json to monitor and alert in real-time for open-source vulnerabilities in the software.
You can find more information about this vulnerability in the following resources:
Related vulnerabilities
Recent vulnerabilities recorded for bouncycastle.
