{"id":"CVE-2018-1000180","url":"https://www.cyber-defence.io/tools/cve/CVE-2018-1000180","generatedAt":"2026-10-29T01:55:06.569Z","title":"Bouncy Castle BC 1.54 - 1.59, BC-FJA 1.0.0, BC-FJA 1.0.1 and earlier have a flaw in the Low-level interface to RSA key pair generator, specifically RSA Key Pairs generated in low-level API with added certainty may have less M-R tests than expected.","description":"Bouncy Castle BC 1.54 - 1.59, BC-FJA 1.0.0, BC-FJA 1.0.1 and earlier have a flaw in the Low-level interface to RSA key pair generator, specifically RSA Key Pairs generated in low-level API with added certainty may have less M-R tests than expected. This appears to be fixed in versions BC 1.60 beta 4 and later, BC-FJA 1.0.2 and later.","published":"2018-06-05T13:29:00.000Z","lastModified":"2026-06-17T01:32:37.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"3.0","score":7.5,"severity":"HIGH","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},"cwe":["CWE-327"],"affected":["bouncycastle/bc-java","bouncycastle/fips java api","debian/debian linux","oracle/api gateway","oracle/business process management suite","oracle/business transaction management","oracle/communications application session controller","oracle/communications converged application server","oracle/communications webrtc session controller","oracle/enterprise repository","oracle/managed file transfer","oracle/peoplesoft enterprise peopletools","oracle/retail convenience and fuel pos software","oracle/retail xstore point of service","oracle/soa suite","oracle/webcenter portal","oracle/weblogic server","netapp/oncommand workflow automation","redhat/virtualization","redhat/jboss enterprise application platform"],"epss":{"score":0.0342,"percentile":0.88838,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (3.42%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"http://www.securityfocus.com/bid/106567","tags":["Third Party Advisory","VDB Entry"],"source":"cve@mitre.org"},{"url":"https://access.redhat.com/errata/RHSA-2018:2423","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://access.redhat.com/errata/RHSA-2018:2424","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://access.redhat.com/errata/RHSA-2018:2425","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://access.redhat.com/errata/RHSA-2018:2428","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://access.redhat.com/errata/RHSA-2018:2643","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://access.redhat.com/errata/RHSA-2018:2669","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://access.redhat.com/errata/RHSA-2019:0877","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://github.com/bcgit/bc-java/commit/22467b6e8fe19717ecdf201c0cf91bacf04a55ad","tags":["Patch","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://github.com/bcgit/bc-java/commit/73780ac522b7795fc165630aba8d5f5729acc839","tags":["Patch","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://github.com/bcgit/bc-java/wiki/CVE-2018-1000180","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451%40%3Csolr-user.lucene.apache.org%3E","source":"cve@mitre.org"},{"url":"https://security.netapp.com/advisory/ntap-20190204-0003/","tags":["Patch","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://www.bountysource.com/issues/58293083-rsa-key-generation-computation-of-iterations-for-mr-primality-test","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://www.debian.org/security/2018/dsa-4233","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://www.oracle.com/security-alerts/cpuApr2021.html","source":"cve@mitre.org"},{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","source":"cve@mitre.org"},{"url":"https://www.oracle.com/security-alerts/cpuoct2020.html","source":"cve@mitre.org"},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","tags":["Patch","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","tags":["Patch","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/106567","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2018:2423","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2018:2424","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2018:2425","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2018:2428","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2018:2643","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2018:2669","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2019:0877","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/bcgit/bc-java/commit/22467b6e8fe19717ecdf201c0cf91bacf04a55ad","tags":["Patch","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/bcgit/bc-java/commit/73780ac522b7795fc165630aba8d5f5729acc839","tags":["Patch","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/bcgit/bc-java/wiki/CVE-2018-1000180","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451%40%3Csolr-user.lucene.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20190204-0003/","tags":["Patch","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.bountysource.com/issues/58293083-rsa-key-generation-computation-of-iterations-for-mr-primality-test","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.debian.org/security/2018/dsa-4233","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/security-alerts/cpuApr2021.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/security-alerts/cpuoct2020.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","tags":["Patch","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","tags":["Patch","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2018-1000180","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}