Oval Definition:oval:com.ubuntu.artful:def:20161000340000
Revision Date:2018-06-04Version:1
Title:CVE-2016-1000340 on Ubuntu 17.10 (artful) - medium.
Description:In the Bouncy Castle JCE Provider versions 1.51 to 1.55, a carry propagation bug was introduced in the implementation of squaring for several raw math classes have been fixed (org.bouncycastle.math.raw.Nat???). These classes are used by our custom elliptic curve implementations (org.bouncycastle.math.ec.custom.**), so there was the possibility of rare (in general usage) spurious calculations for elliptic curve scalar multiplications. Such errors would have been detected with high probability by the output validation for our scalar multipliers.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2016-1000340
Platform(s):Ubuntu 17.10
Product(s):
Definition Synopsis
  • Ubuntu 17.10 (artful) is installed.
  • AND NOT While related to the CVE in some way, the 'bouncycastle' package in artful is not affected (note: '1.57-1').
  • BACK