CVE-2015-7940
The Bouncy Castle Java library before 1.51 does not validate a point is withing the elliptic curve, which makes it easier for remote attackers to obtain private keys via a series of crafted elliptic curve Diffie Hellman (ECDH) key exchanges, aka an "invalid curve attack."
- EPSS
- 4.7% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-200, CWE-310
- Published
- Modified
- Record from
- the NVD, synced
Affected
- bouncycastle:bouncy_castle_crypto_package
- opensuse:leap
- opensuse:opensuse
- oracle:application_testing_suite
- oracle:enterprise_manager_ops_center
- oracle:peoplesoft_enterprise_peopletools
- oracle:virtual_desktop_infrastructure
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-4mv7-cq75-3qjm | Maven | org.bouncycastle:bcprov-jdk15 | <1.51 | 1.51 |
| GHSA-4mv7-cq75-3qjm | Maven | org.bouncycastle:bcprov-jdk14 | <1.51 | 1.51 |
| GHSA-4mv7-cq75-3qjm | Maven | org.bouncycastle:bcprov-jdk15on | <1.51 | 1.51 |
References
- http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174915.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00012.html
- http://rhn.redhat.com/errata/RHSA-2016-2035.html
- http://rhn.redhat.com/errata/RHSA-2016-2036.html
- http://web-in-security.blogspot.ca/2015/09/practical-invalid-curve-attacks.html