In the Bouncy Castle JCE Provider version 1.55 and earlier the primary engine class used…
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- Low · None · None
- Fix status
- Partial Red Hat: 3 fixed, 4 without a fix
Attack profile from CVSS 3.0 · NVD. Fix status from CNA, GitHub and Red Hat.
Summary
In the Bouncy Castle JCE Provider version 1.55 and earlier the primary engine class used for AES was AESFastEngine. Due to the highly table driven approach used in the algorithm it turns out that if the data channel on the CPU can be monitored the lookup table accesses are sufficient to leak information on the AES key being used. There was also a leak in AESEngine although it was substantially less. AESEngine has been modified to remove any signs of leakage (testing carried out on Intel X86-64) and is now the primary AES class for the BC JCE provider from 1.56. Use of AESFastEngine is now only recommended where otherwise deemed appropriate.
Why it matters now
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
| — | org.bouncycastle:bcprov-jdk14 (Maven) | before 1.56 | 1.56 | Patch available | GHSA-c8xf-m4ff-jcxj |
| — | org.bouncycastle:bcprov-jdk15 (Maven) | before 1.56 | 1.56 | Patch available | GHSA-c8xf-m4ff-jcxj |
| — | org.bouncycastle:bcprov-jdk15on (Maven) | before 1.56 | 1.56 | Patch available | GHSA-c8xf-m4ff-jcxj |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
- org.bouncycastle:bcprov-jdk14 (Maven) Vendor— Affected before 1.56 Fixed in 1.56 Patch available GHSA-c8xf-m4ff-jcxj
- org.bouncycastle:bcprov-jdk15 (Maven) Vendor— Affected before 1.56 Fixed in 1.56 Patch available GHSA-c8xf-m4ff-jcxj
- org.bouncycastle:bcprov-jdk15on (Maven) Vendor— Affected before 1.56 Fixed in 1.56 Patch available GHSA-c8xf-m4ff-jcxj
CPE configurations NVD · 2
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:bouncycastle:bc-java:*:*:*:*:*:*:*:* | up to 1.55 | Vulnerable | Legion of the Bouncy Castle Inc. |
| cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* | 8.0 | Vulnerable | Debian |
- cpe:2.3:a:bouncycastle:bc-java:*:*:*:*:*:*:*:* Versions up to 1.55 Vulnerable ·Legion of the Bouncy Castle Inc.
- cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Debian
Remediation
- Fix · GHSA-c8xf-m4ff-jcxj org.bouncycastle:bcprov-jdk14 (Maven) Fixed in 1.56 Advisory →
- Fix · GHSA-c8xf-m4ff-jcxj org.bouncycastle:bcprov-jdk15 (Maven) Fixed in 1.56 Advisory →
- Fix · GHSA-c8xf-m4ff-jcxj org.bouncycastle:bcprov-jdk15on (Maven) Fixed in 1.56 Advisory →
Red Hat 2 advisories
- RHSA-2018:2927 Released 2018-10-16 · Red Hat rating ImportantSatellite 6.4 security, bug fix, and enhancement update
- Red Hat Satellite 6.4 SOAPpy-0.11.6-17.el7, ansiblerole-insights-client-1.5-1.el7sat, candlepin-2.4.8-1.el7 +47
- Red Hat Satellite Capsule 6.4 SOAPpy-0.11.6-17.el7, ansiblerole-insights-client-1.5-1.el7sat, createrepo_c-0.7.4-1.el7sat +47
- RHSA-2018:2669 Released 2018-09-11 · Red Hat rating ImportantFuse 7.1 security update
- Red Hat Fuse 7
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat JBoss Data Virtualization 6 | Affected | No fix planned: Out of support scope |
| Red Hat JBoss Fuse 6 | Affected | No fix planned: Will not fix |
| Red Hat Software Collections | Affected | No fix planned: Will not fix |
| Red Hat Subscription Asset Manager | Affected | No fix planned: Will not fix |
| Red Hat Fuse 7 | Fixed | RHSA-2018:2669 |
| Red Hat Satellite 6.4 | Fixed | RHSA-2018:2927 |
| Red Hat Satellite Capsule 6.4 | Fixed | RHSA-2018:2927 |
Not affected: 7 products
- JBoss Developer Studio 11
- Red Hat JBoss Data Grid 7
- Red Hat JBoss Enterprise Application Platform 7
- Red Hat JBoss Fuse Integration Service 2
- Red Hat OpenShift Application Runtimes
- Red Hat Single Sign-On 7
- Red Hat Virtualization 4
Timeline
- 2026-10-02 Threatist record created from CVE-2016-1000339
- 2026-10-03 Alias added: GHSA-c8xf-m4ff-jcxj
- 2026-11-03 Fix available: Red Hat Fuse 7 · Red Hat
References
Patch 2
Advisory 6
Sources
- CVE-2016-1000339 · CVE Program
- CVE-2016-1000339 · NVD
- FIRST EPSS
- GHSA-c8xf-m4ff-jcxj · GitHub Advisory Database · CC BY 4.0
- CVE-2016-1000339 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences