CVE-2016-1000338: In Bouncy Castle JCE Provider version 1.55 and earlier the DSA does not fully validate ASN.1 encoding of signature on verification

Description

In Bouncy Castle JCE Provider version 1.55 and earlier the DSA does not fully validate ASN.1 encoding of signature on verification. It is possible to inject extra elements in the sequence making up the signature and still have it validate, which in some cases may allow the introduction of 'invisible' data into a signed structure.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Attack vector

Network

Complexity

Low

Privileges

None

User interaction

None

Confidentiality

None

Integrity

High

Availability

None

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)1.8% · higher than 78% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

7T

7-mode Transition Tool · Netapp

All versions, or not specified · source: NVD

LE

Legion-of-the-bouncy-castle-java-crytography-api · Bouncycastle

1.38 before 1.56 · source: NVD

SA

Satellite · Redhat

6.4 · source: NVD

SC

Satellite Capsule · Redhat

6.4 · source: NVD

UL

Ubuntu Linux · Canonical

14.04 · source: NVD