CVE-2016-1000338

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-06-01 · updated 2026-06-17
Weakness: CWE-347

Description

In Bouncy Castle JCE Provider version 1.55 and earlier the DSA does not fully validate ASN.1 encoding of signature on verification. It is possible to inject extra elements in the sequence making up the signature and still have it validate, which in some cases may allow the introduction of 'invisible' data into a signed structure.

Affected products

Bouncycastle Legion-Of-The-Bouncy-Castle-Java-Crytography-Api: from 1.38 before 1.56 — fixed in 1.56
Canonical Ubuntu Linux: 14.04
NetApp 7-Mode Transition Tool: all versions
Red Hat Satellite 6: 6.4
RedHat Satellite Capsule: 6.4

How to fix

Upgrade to a fixed version: Bouncycastle Legion-Of-The-Bouncy-Castle-Java-Crytography-Api 1.56. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2016-1000338 or the next vulnerability affects your stack