Bouncy Castle in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to obtain sensitive information via a crafted application, aka internal bug 24106146.

An update is now available for Red Hat Satellite 6.4 for RHEL 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Red Hat Satellite is a systems management tool for Linux-based infrastructure. It allows for provisioning, remote management, and monitoring of multiple Linux deployments with a single centralized tool.

Security Fix(es) :

* jackson-databind: Unsafe deserialization due to incomplete black list (incomplete fix for CVE-2017-7525) (CVE-2017-15095)

* hornetq: XXE/SSRF in XPath selector (CVE-2015-3208)

* bouncycastle: Information disclosure in GCMBlockCipher (CVE-2015-6644)

* bouncycastle: DSA does not fully validate ASN.1 encoding during signature verification allowing for injection of unsigned data (CVE-2016-1000338)

* bouncycastle: Information leak in AESFastEngine class (CVE-2016-1000339)

* bouncycastle: Information exposure in DSA signature generation via timing attack (CVE-2016-1000341)

* bouncycastle: ECDSA improper validation of ASN.1 encoding of signature (CVE-2016-1000342)

* bouncycastle: DHIES implementation allowed the use of ECB mode (CVE-2016-1000344)

* bouncycastle: DHIES/ECIES CBC modes are vulnerable to padding oracle attack (CVE-2016-1000345)

* bouncycastle: Other party DH public keys are not fully validated (CVE-2016-1000346)

* bouncycastle: ECIES implementation allowed the use of ECB mode (CVE-2016-1000352)

* logback: Serialization vulnerability in SocketServer and ServerSocketReceiver (CVE-2017-5929)

* python-django: Open redirect and possible XSS attack via user-supplied numeric redirect URLs (CVE-2017-7233)

* hibernate-validator: Privilege escalation when running under the security manager (CVE-2017-7536)

* puppet: Environment leakage in puppet-agent (CVE-2017-10690)

* Satellite 6: XSS in discovery rule filter autocomplete functionality (CVE-2017-12175)

* foreman: Stored XSS in fact name or value (CVE-2017-15100)

* pulp: sensitive credentials revealed through the API (CVE-2018-1090)

* foreman: SQL injection due to improper handling of the widget id parameter (CVE-2018-1096)

* foreman: Ovirt admin password exposed by foreman API (CVE-2018-1097)

* django: Catastrophic backtracking in regular expressions via 'urlize' and 'urlizetrunc' (CVE-2018-7536)

* django: Catastrophic backtracking in regular expressions via 'truncatechars_html' and 'truncatewords_html' (CVE-2018-7537)

* guava: Unbounded memory allocation in AtomicDoubleArray and CompoundOrdering classes allow remote attackers to cause a denial of service (CVE-2018-10237)

* bouncycastle: Carry propagation bug in math.raw.Nat??? class (CVE-2016-1000340)

* bouncycastle: DSA key pair generator generates a weak private key by default (CVE-2016-1000343)

* puppet: Unpacking of tarballs in tar/mini.rb can create files with insecure permissions (CVE-2017-10689)

* bouncycastle: BKS-V1 keystore files vulnerable to trivial hash collisions (CVE-2018-5382)

For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

Red Hat would like to thank Liao Xinxi (NSFOCUS) for reporting CVE-2017-15095; and the Django project for reporting CVE-2017-7233, CVE-2018-7536, and CVE-2018-7537. The CVE-2017-7536 issue was discovered by Gunnar Morling (Red Hat); and the CVE-2018-1096 issue was discovered by Martin Povolny (Red Hat). Red Hat would also like to thank David Jorm (IIX Product Security) for reporting CVE-2015-3208.

Additional Changes :

This update also fixes several bugs and adds various enhancements.
Documentation for these changes is available from the Release Notes document linked to in the References section.

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3727-1 advisory.

    It was discovered that Bouncy Castle incorrectly handled certain crypto algorithms. A remote attacker     could possibly use these issues to obtain sensitive information, including private keys.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:2809 advisory.

    Red Hat JBoss Enterprise Application Platform is a platform for Java applications based on the JBoss     Application Server.

    This release of Red Hat JBoss Enterprise Application Platform 7.0.8 serves as a replacement for Red Hat     JBoss Enterprise Application Platform 7.0.7, and includes bug fixes and enhancements, which are documented     in the Release Notes document linked to in the References.

    Security Fix(es):

    * It was found that when using remote logging with log4j socket server the log4j server would deserialize     any log event received via TCP or UDP. An attacker could use this flaw to send a specially crafted log     event that, during deserialization, would execute arbitrary code in the context of the logger application.
    (CVE-2017-5645)

    * A vulnerability was found in Jasypt that would allow an attacker to perform a timing attack on password     hash comparison. (CVE-2014-9970)

    * It was found that an information disclosure flaw in Bouncy Castle could enable a local malicious     application to gain access to user's private information. (CVE-2015-6644)

    * It was found that while parsing the SAML messages the StaxParserUtil class of Picketlink replaces     special strings for obtaining attribute values with system property. This could allow an attacker to     determine values of system properties at the attacked system by formatting the SAML request ID field to be     the chosen system property which could be obtained in the InResponseTo field in the response.
    (CVE-2017-2582)

    * It was found that when the security manager's reflective permissions, which allows it to access the     private members of the class, are granted to Hibernate Validator, a potential privilege escalation can     occur. By allowing the calling code to access those private members without the permission an attacker may     be able to validate an invalid instance and access the private member value via     ConstraintViolation#getInvalidValue(). (CVE-2017-7536)

    The CVE-2017-2582 issue was discovered by Hynek Mlnarik (Red Hat) and the CVE-2017-7536 issue was     discovered by Gunnar Morling (Red Hat).

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:2808 advisory.

    Red Hat JBoss Enterprise Application Platform is a platform for Java applications based on the JBoss     Application Server.

    This release of Red Hat JBoss Enterprise Application Platform 7.0.8 serves as a replacement for Red Hat     JBoss Enterprise Application Platform 7.0.7, and includes bug fixes and enhancements, which are documented     in the Release Notes document linked to in the References.

    Security Fix(es):

    * It was found that when using remote logging with log4j socket server the log4j server would deserialize     any log event received via TCP or UDP. An attacker could use this flaw to send a specially crafted log     event that, during deserialization, would execute arbitrary code in the context of the logger application.
    (CVE-2017-5645)

    * A vulnerability was found in Jasypt that would allow an attacker to perform a timing attack on password     hash comparison. (CVE-2014-9970)

    * It was found that an information disclosure flaw in Bouncy Castle could enable a local malicious     application to gain access to user's private information. (CVE-2015-6644)

    * It was found that while parsing the SAML messages the StaxParserUtil class of Picketlink replaces     special strings for obtaining attribute values with system property. This could allow an attacker to     determine values of system properties at the attacked system by formatting the SAML request ID field to be     the chosen system property which could be obtained in the InResponseTo field in the response.
    (CVE-2017-2582)

    * It was found that when the security manager's reflective permissions, which allows it to access the     private members of the class, are granted to Hibernate Validator, a potential privilege escalation can     occur. By allowing the calling code to access those private members without the permission an attacker may     be able to validate an invalid instance and access the private member value via     ConstraintViolation#getInvalidValue(). (CVE-2017-7536)

    The CVE-2017-2582 issue was discovered by Hynek Mlnarik (Red Hat) and the CVE-2017-7536 issue was     discovered by Gunnar Morling (Red Hat).

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:2811 advisory.

    The eap7-jboss-ec2-eap packages provide scripts for Red Hat JBoss Enterprise Application Platform running     on the Amazon Web Services (AWS) Elastic Compute Cloud (EC2).

    With this update, the eap7-jboss-ec2-eap package has been updated to ensure compatibility with Red Hat     JBoss Enterprise Application Platform 7.0.8.

    Refer to the JBoss Enterprise Application Platform 7.0.8 Release Notes, linked to in the References     section, for information on the most significant bug fixes and enhancements included in this release.

    Security Fix(es):

    * It was found that when using remote logging with log4j socket server the log4j server would deserialize     any log event received via TCP or UDP. An attacker could use this flaw to send a specially crafted log     event that, during deserialization, would execute arbitrary code in the context of the logger application.
    (CVE-2017-5645)

    * A vulnerability was found in Jasypt that would allow an attacker to perform a timing attack on password     hash comparison. (CVE-2014-9970)

    * It was found that an information disclosure flaw in Bouncy Castle could enable a local malicious     application to gain access to user's private information. (CVE-2015-6644)

    * It was found that while parsing the SAML messages the StaxParserUtil class of Picketlink replaces     special strings for obtaining attribute values with system property. This could allow an attacker to     determine values of system properties at the attacked system by formatting the SAML request ID field to be     the chosen system property which could be obtained in the InResponseTo field in the response.
    (CVE-2017-2582)

    * It was found that when the security manager's reflective permissions, which allows it to access the     private members of the class, are granted to Hibernate Validator, a potential privilege escalation can     occur. By allowing the calling code to access those private members without the permission an attacker may     be able to validate an invalid instance and access the private member value via     ConstraintViolation#getInvalidValue(). (CVE-2017-7536)

    The CVE-2017-2582 issue was discovered by Hynek Mlnarik (Red Hat) and the CVE-2017-7536 issue was     discovered by Gunnar Morling (Red Hat).

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Security fix for CVE-2015-6644

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Quan Nguyen discovered that a missing boundary check in the Galois/Counter mode implementation of Bouncy Castle (a Java implementation of cryptographic algorithms) may result in information disclosure.

An information disclosure vulnerability was discovered in Bouncy Castle, a Java library which consists of various cryptographic algorithms. The Galois/Counter mode (GCM) implementation was missing a boundary check that could enable a local application to gain access to user's private information.

For Debian 7 'Wheezy', these problems have been fixed in version 1.44+dfsg-3.1+deb7u2.

We recommend that you upgrade your bouncycastle packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
118185	RHEL 7 : Satellite Server (RHSA-2018:2927)	Nessus	Red Hat Local Security Checks	critical
111512	Ubuntu 14.04 LTS : Bouncy Castle vulnerabilities (USN-3727-1)	Nessus	Ubuntu Local Security Checks	high
103527	RHEL 6 : Red Hat JBoss Enterprise Application Platform (RHSA-2017:2809)	Nessus	Red Hat Local Security Checks	critical
103526	RHEL 7 : Red Hat JBoss Enterprise Application Platform (RHSA-2017:2808)	Nessus	Red Hat Local Security Checks	critical
103500	RHEL 6 / 7 : eap7-jboss-ec2-eap (RHSA-2017:2811)	Nessus	Red Hat Local Security Checks	critical
99924	Fedora 24 : bouncycastle (2017-4c3ac44551)	Nessus	Fedora Local Security Checks	low
99318	Debian DSA-3829-1 : bouncycastle - security update	Nessus	Debian Local Security Checks	low
99271	Debian DLA-893-1 : bouncycastle security update	Nessus	Debian Local Security Checks	low

Detections

Analytics

CVE-2015-6644

low

Tenable Plugins

critical

high

critical

critical

critical

low

low

low