WaratekVRT Sign in

CVE-2016-1000340

Severity7.5 High CVSS 3.0 2 scores
Fixed in1.56
WeaknessCWE-19
Published4 Jun 2018
Updated17 Jun 2026

Description

In the Bouncy Castle JCE Provider versions 1.51 to 1.55, a carry propagation bug was introduced in the implementation of squaring for several raw math classes have been fixed (org.bouncycastle.math.raw.Nat???). These classes are used by our custom elliptic curve implementations (org.bouncycastle.math.ec.custom.**), so there was the possibility of rare (in general usage) spurious calculations for elliptic curve scalar multiplications. Such errors would have been detected with high probability by the output validation for our scalar multipliers.

Exploitation status

No public exploit

No exploit has been reported in the sources we check. Published 8 years ago.
  • CISA KEV not listed
  • VulnCheck KEV not listed
  • CISA Vulnrichment no assessment published
  • Indexed PoC none indexed
  • EPSS 2.3% chance in 30 days

Waratek protection

Protected by Waratek

Waratek has a rule that blocks attacks on this vulnerability.

  • Protection full
  • Action available patch rule
  • Review human ARMR file
  • Record active
Decided by An ARMR patch file on disk for this CVE
Finding CVE has an ARMR patch rule that provides mitigation

ARMR rule files

1 file

The rule files Waratek ships for this CVE. Some CVEs need more than one, for example one per affected library or one per ARMR version.

CVE-2016-1000340.armr patch rule, ARMR 2.6 added 2019-08-20 updated 2026-03-04
Sign in to download

How to mitigate CVE-2016-1000340

Upgrade the affected software to 1.56 or later. Until you can, Waratek RASP blocks exploitation with a rule written for this CVE. It runs inside the Java application, with no code changes.

Waratek RASP Runtime protection for Java applications

CVSS

7.5 HIGH v3.0 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N 2 metrics

We show the highest score from the newest CVSS version. Scores from different versions can't be compared, and the first score listed is sometimes a 0.0 placeholder.

VersionScoreBandVectorAssignerType
CVSS 3.0 7.5 HIGH CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N NVD Primary published
CVSS 2.0 5.0 none AV:N/AC:L/Au:N/C:N/I:P/A:N NVD Primary

Affected software and releases

Maven packages

Affected and fixed versions, from OSV.dev
PackageIntroducedFixedLast affected
org.bouncycastle:bcprov-jdk14 1.51 1.56 unbounded
org.bouncycastle:bcprov-jdk15 1.51 1.56 unbounded
org.bouncycastle:bcprov-jdk15on 1.51 1.56 unbounded

Products and versions

4 products, 4 version entries
SourceVendorProductSchemeAffected versions
nvd bouncycastle bc-java generic ≥ 1.51 and ≤ 1.55
osv org.bouncycastle bcprov-jdk14 generic ≥ 1.51 and ＜ 1.56
osv org.bouncycastle bcprov-jdk15 generic ≥ 1.51 and ＜ 1.56
osv org.bouncycastle bcprov-jdk15on generic ≥ 1.51 and ＜ 1.56

References

URLTags
https://github.com/bcgit/bc-java/commit/790642084c4e0cadd47352054f868cc8397e2c00#diff-e5934feac8203ca0104ab291a3560a31 WEB
https://access.redhat.com/errata/RHSA-2018:2669 WEB
https://access.redhat.com/errata/RHSA-2018:2927 WEB
https://github.com/advisories/GHSA-r97x-3g8f-gx3m ADVISORY
https://github.com/bcgit/bc-java PACKAGE
https://security.netapp.com/advisory/ntap-20181127-0004 WEB
https://www.oracle.com/security-alerts/cpuoct2020.html WEB
https://security.netapp.com/advisory/ntap-20181127-0004/

Timeline
Published2018-06-04By the CVE Program.
ARMR remediation created2019-08-20Earliest commit adding this CVE's ARMR patch or security rule.
ARMR remediation last updated2026-03-04Most recent commit touching this CVE's ARMR patch or security rule.
Last VRT activity2026-03-04Most recent commit touching this CVE's classification, patch or rule file.
NVD record modified2026-06-17NVD's own last-modified date for this record.