CVE-2018-1000180 Bouncy Castle has a flaw in the Low-level interface to RSA key pair generator
The Bouncy Castle library generates RSA keys with insufficient primality tests, potentially allowing attackers to bypass cryptographic security guarantees.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2018-1000180?
CVE-2018-1000180 is a high-severity vulnerability in Bouncycastle Bc-Java, published on 5 Jun 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Bouncy Castle BC 1.54 - 1.59, BC-FJA 1.0.0, BC-FJA 1.0.1 and earlier have a flaw in the Low-level interface to RSA key pair generator, specifically RSA Key Pairs generated in low-level API with added certainty may have less M-R tests than expected. This appears to be fixed in versions BC 1.60 beta 4 and later, BC-FJA 1.0.2 and later.
Weakness: CWE-327
Which versions are affected by CVE-2018-1000180?
6 open source packages ship an affected version, including org.bouncycastle:bcprov-jdk14, org.bouncycastle:bcprov-jdk15 and org.bouncycastle:bcprov-jdk15on. It affects 20 products.
| Package | Affected | Fixed in |
|---|---|---|
org.bouncycastle:bcprov-jdk14 Maven | All versions | 1.60 |
org.bouncycastle:bcprov-jdk14 Maven | All versions | 1.60 |
org.bouncycastle:bcprov-jdk15 Maven | All versions | 1.60 |
org.bouncycastle:bcprov-jdk15 Maven | All versions | 1.60 |
org.bouncycastle:bcprov-jdk15on Maven | All versions | 1.60 |
org.bouncycastle:bcprov-jdk15on Maven | All versions | 1.60 |
Products include Bouncycastle Bc-Java, Bouncycastle Fips Java Api, Debian Debian Linux, Netapp Oncommand Workflow Automation, Oracle Api Gateway, Oracle Business Process Management Suite and 14 more.
How do I fix CVE-2018-1000180?
Upgrade org.bouncycastle:bcprov-jdk14 to 1.60 or later.
Is CVE-2018-1000180 being exploited?
There is no known exploitation of CVE-2018-1000180 in the wild and no public exploit code.
Other vulnerabilities in Bouncycastle Bc-Java
- CVE-2007-6721 Legion of the Bouncy Castle Java Cryptography API Bleichenbacher Oracle Vulnerability
- CVE-2018-1000613 Deserialization of Untrusted Data in Bouncy castle
- CVE-2026-58062 Stapled OCSP response accepted without binding to the checked certificate
- CVE-2026-59638 JSSE hostname verifier CN-fallback enabled by default despite documented opt-in
- CVE-2026-59650 MTI/A0 DH agreement exponentiates unvalidated peer value
Sources
Also known as DEBIAN-CVE-2018-1000180, DSA-4233-1, GHSA-xqj7-j8j5-f2xr, ROOT-APP-MAVEN-CVE-2018-1000180, UBUNTU-CVE-2018-1000180.