Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:7056
HistoryJul 16, 2018 - 4:44 a.m.

Remote Code Execution Via Deserialization

2018-07-1604:44:10
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12

0.006 Low

EPSS

Percentile

77.8%

JSON

Legion of the Bouncy Castle Java Cryptography APIs is vulnerable to remote code execution via a deserialization bug. This is due to a lack of class checking in the deserialization of XMSS/XMSS^MT private keys with BDS state information.

References

Related

nessus 7
github 1
cvelist 1
cve 1
redhatcve 1
debiancve 1
nvd 1
osv 1
openvas 5
suse 3
ubuntucve 1
prion 1
freebsd 1
ibm 12
fedora 1
atlassian 2
mageia 1
oracle 6
nessus
nessus
Fedora 28 : bouncycastle (2018-e6894349c9)
2019-01-03 00:00:00
openSUSE Security Update : bouncycastle (openSUSE-2018-794)
2018-08-06 00:00:00
openSUSE Security Update : bouncycastle (openSUSE-2019-546)
2019-03-27 00:00:00
github
github
Deserialization of Untrusted Data in Bouncy castle
2018-10-17 16:23:12
cvelist
cvelist
CVE-2018-1000613
2018-07-09 20:00:00
cve
cve
CVE-2018-1000613
2018-07-09 20:29:00
redhatcve
redhatcve
CVE-2018-1000613
2018-07-13 21:19:06
debiancve
debiancve
CVE-2018-1000613
2018-07-09 20:29:00
nvd
nvd
CVE-2018-1000613
2018-07-09 20:29:00
osv
osv
Deserialization of Untrusted Data in Bouncy castle
2018-10-17 16:23:12
openvas
openvas
openSUSE: Security Advisory for bouncycastle (openSUSE-SU-2018:2180-1)
2018-08-04 00:00:00
openSUSE: Security Advisory for bouncycastle (openSUSE-SU-2018:2131-1)
2018-10-26 00:00:00
openSUSE: Security Advisory for bouncycastle (openSUSE-SU-2020:0607-1)
2020-05-04 00:00:00
suse
suse
Security update for bouncycastle (moderate)
2018-08-03 21:09:02
Security update for bouncycastle (moderate)
2020-05-04 00:00:00
Security update for bouncycastle (moderate)
2018-07-28 16:04:25
ubuntucve
ubuntucve
CVE-2018-1000613
2018-07-09 00:00:00
prion
prion
Deserialization of untrusted data
2018-07-09 20:29:00
freebsd
freebsd
Several Security Defects in the Bouncy Castle Crypto APIs
2018-06-30 00:00:00
ibm
ibm
Security Bulletin: Multiple vulnerabilities in Bouncy Castle API affect IBM License Metric Tool v9.
2020-04-03 08:05:51
Security Bulletin: Bouncy Castle as used by IBM QRadar SIEM contains multiple vulnerabilities (CVE-2018-1000613, CVE-2017-13098, CVE-2018-1000180)
2021-02-05 19:10:36
Security Bulletin: IBM Planning Analytics Workspace is affected by multiple vulnerabilities (CVE-2022-22968, CVE-2022-24785, CVE-2017-18214, CVE-2016-4055, CVE-2018-1000613, CVE-2020-15522, CVE-2018-1000180, CVE-2020-26939, CVE-2022-22314)
2022-09-06 19:57:58
fedora
fedora
[SECURITY] Fedora 28 Update: bouncycastle-1.60-1.fc28
2018-08-30 04:58:39
atlassian
atlassian
Update Atlassian Platform to 3.5.19 to fix CVE-2018-1000613, CVE-2019-17571 and other vulnerabilities
2021-02-03 22:39:15
Update Atlassian Platform to 3.5.19 to fix CVE-2018-1000613, CVE-2019-17571 and other vulnerabilities
2021-02-03 22:39:15
mageia
mageia
Updated bouncycastle packages fix security vulnerabilities
2018-09-21 02:17:55
oracle
oracle
Oracle Critical Patch Update Advisory - January 2019
2019-01-15 00:00:00
Oracle Critical Patch Update Advisory - April 2019
2019-04-16 00:00:00
Oracle Critical Patch Update Advisory - July 2019
2019-07-16 00:00:00

0.006 Low

EPSS

Percentile

77.8%

JSON
Related for VERACODE:7056
nessus7github1cvelist1cve1redhatcve1debiancve1nvd1osv1openvas5suse3ubuntucve1prion1freebsd1ibm12fedora1atlassian2mageia1oracle6