{"schemaVersion":3,"id":"CVE-2016-1000346","aliases":["UBUNTU-CVE-2016-1000346","DEBIAN-CVE-2016-1000346","CGA-24m6-r938-jff7","CGA-2cvw-5w9g-7652","CGA-2fvq-f5x3-qvq2","CGA-2r8h-cpc6-ww9f","CGA-2xx8-23pc-2994","CGA-3xxj-grv6-h9pc","CGA-42xq-9xr5-jmv9","CGA-4f5h-937v-j6hf","CGA-55f2-vvw8-53pp","CGA-56g2-rg7q-rc6h","CGA-62pj-mrhx-jrqh","CGA-62xv-vhwv-499c","CGA-69j4-gwm2-2cw5","CGA-6fvw-rrp4-33mw","CGA-6pg5-vp52-p2r7","CGA-6pj3-9f35-8cf4","CGA-6qmr-px63-fp79","CGA-73g6-83jw-7q2p","CGA-75mw-v66g-6x8f","CGA-78pw-3q7v-8998","CGA-7xhh-m7fq-43mj","CGA-837r-9r25-6wp9","CGA-89pw-q364-v9mc","CGA-89x3-wvf4-m7qc","CGA-8g63-gp7q-2h5j","CGA-93m4-qh4w-8jg9","CGA-93pr-jq37-j6c5","CGA-98r4-f4h4-798q","CGA-9jhg-6hg7-c9p9","CGA-c4pr-c397-rcrq","CGA-c8h5-7vj3-4vj3","CGA-cccp-8rg8-xrjh","CGA-cf8f-8fx9-prpc","CGA-ch5c-9gfp-cjv4","CGA-cm86-h4jf-xhg6","CGA-cpw2-6c94-cp3p","CGA-fjjx-xhj8-h5jf","CGA-fpr3-3pwr-4xmh","CGA-fvw5-mg22-756w","CGA-fw6q-mmpc-rm8f","CGA-g2m4-6gx9-ggcp","CGA-gwc6-jf8j-wpxx","CGA-h83j-xvgp-q3v2","CGA-h934-fhmr-wgcq","CGA-hrp7-6x5v-5pcv","CGA-hwr6-7q79-56q3","CGA-jcc4-25f5-mvgr","CGA-jqg2-xjmr-4jc2","CGA-jx97-q572-545h","CGA-m487-63h5-pjrv","CGA-mgf8-4cc4-j4gq","CGA-mhx9-m229-7g57","CGA-mpgm-g8qg-j6c3","CGA-p9v2-cfxw-vrfq","CGA-pjj3-2m6r-pjm4","CGA-ppfv-2vg4-6pv2","GHSA-fjqm-246c-mwqg","CGA-q2x8-3pq6-mwx4","CGA-q7fr-qf9v-xcw7","CGA-qg42-9679-rfjh","CGA-r78h-2ccw-5fq5","CGA-rf7p-97f8-vf7f","CGA-v5fc-9m6g-qgrr","CGA-v6cc-7m3r-9hc4","CGA-w24q-f6rg-vc8h","CGA-w4c4-pcjc-qv64","CGA-w973-p5c8-cc7r","CGA-wgqg-46fc-pw4w","CGA-whqp-gc7c-fqc2","CGA-wqp4-wh93-c42f","CGA-wxf9-wq99-9cpr","CGA-x49p-6xc5-69wr","CGA-x4gq-m6h3-vw24","CGA-xf3c-xgjw-8gp9","CGA-xpvm-jqxf-2w25"],"status":"published","duplicateOf":null,"title":null,"description":"In the Bouncy Castle JCE Provider version 1.55 and earlier the other party DH public key is not fully validated. This can cause issues as invalid keys can be used to reveal details about the other party's private key where static Diffie-Hellman is in use. As of release 1.56 the key parameters are checked on agreement calculation.","dates":{"published":"2018-06-04T21:00:00.000Z","modified":"2024-08-06T03:55:27.532Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":4.3,"severity":"medium","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.0","versionLabel":"v3.0","source":"NVD","score":3.7,"severity":"low","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":4.3,"severity":"medium","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.0","versionLabel":"v3.0","source":"OSV · Ubuntu","score":3.7,"severity":"low","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","exploitability":5.6,"impact":2.3,"computed":true},{"version":"3.0","versionLabel":"v3.0","source":"OSV · Debian","score":3.7,"severity":"low","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","exploitability":5.6,"impact":2.3,"computed":true},{"version":"3.0","versionLabel":"v3.0","source":"OSV · Chainguard","score":3.7,"severity":"low","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","exploitability":5.6,"impact":2.3,"computed":true},{"version":"3.0","versionLabel":"v3.0","source":"OSV · Maven","score":3.7,"severity":"low","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","exploitability":5.6,"impact":2.3,"computed":true}]},"epss":{"probability":0.0217,"percentile":0.8201,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":-0.13299999999999979,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.02303},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.02303,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.02303,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.02303,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.02303,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.02303,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.02303,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.02303,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.0243,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.02303,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.02303,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.02303,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.02303,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.02213,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.02213,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.02213,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.02213,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.02213,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.02213,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.02213,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.02213,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.02213,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.02213,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.02213,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.02213,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.02213,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.02213,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.02213,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.0217,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.0217,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.0217,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.0217,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.0217,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.0217,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.0217,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.0217,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.0217,"percentile":0.8201}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.02303,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.02303,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.0243,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.02303,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.02303,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.02303,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.02303,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.02213,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.02213,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.02213,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.02213,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.02213,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.02213,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.02213,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.02213,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.02213,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.02213,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.02213,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.02213,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.02213,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.02213,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.02213,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.0217,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.0217,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.0217,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.0217,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.0217,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.0217,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.0217,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.0217,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.0217,"percentile":0.8201}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-320","name":"Key Management Errors","description":"Weaknesses in this category are related to errors in the management of cryptographic keys.","type":"category","status":"Obsolete","abstraction":null,"likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/320.html"}],"affected":[{"vendor":"chainguard","product":"eco-java-gradle-1.11","name":"eco-java-gradle-1.11","label":"eco-java-gradle-1.11","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/eco-java-gradle-1.11","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"eco-java-gradle-2.0","name":"eco-java-gradle-2.0","label":"eco-java-gradle-2.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/eco-java-gradle-2.0","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"eco-java-gradle-2.1","name":"eco-java-gradle-2.1","label":"eco-java-gradle-2.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/eco-java-gradle-2.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"eco-java-gradle-2.10","name":"eco-java-gradle-2.10","label":"eco-java-gradle-2.10","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/eco-java-gradle-2.10","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"eco-java-gradle-2.11","name":"eco-java-gradle-2.11","label":"eco-java-gradle-2.11","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/eco-java-gradle-2.11","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"eco-java-gradle-2.12","name":"eco-java-gradle-2.12","label":"eco-java-gradle-2.12","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/eco-java-gradle-2.12","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"eco-java-gradle-2.13","name":"eco-java-gradle-2.13","label":"eco-java-gradle-2.13","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/eco-java-gradle-2.13","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"eco-java-gradle-2.14","name":"eco-java-gradle-2.14","label":"eco-java-gradle-2.14","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/eco-java-gradle-2.14","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"eco-java-gradle-2.14.1","name":"eco-java-gradle-2.14.1","label":"eco-java-gradle-2.14.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/eco-java-gradle-2.14.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"eco-java-gradle-2.2","name":"eco-java-gradle-2.2","label":"eco-java-gradle-2.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/eco-java-gradle-2.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"eco-java-gradle-2.2.1","name":"eco-java-gradle-2.2.1","label":"eco-java-gradle-2.2.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/eco-java-gradle-2.2.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"eco-java-gradle-2.3","name":"eco-java-gradle-2.3","label":"eco-java-gradle-2.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/eco-java-gradle-2.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"eco-java-gradle-2.4","name":"eco-java-gradle-2.4","label":"eco-java-gradle-2.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/eco-java-gradle-2.4","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"eco-java-gradle-2.5","name":"eco-java-gradle-2.5","label":"eco-java-gradle-2.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/eco-java-gradle-2.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"eco-java-gradle-2.6","name":"eco-java-gradle-2.6","label":"eco-java-gradle-2.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/eco-java-gradle-2.6","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"eco-java-gradle-2.7","name":"eco-java-gradle-2.7","label":"eco-java-gradle-2.7","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/eco-java-gradle-2.7","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"eco-java-gradle-2.8","name":"eco-java-gradle-2.8","label":"eco-java-gradle-2.8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/eco-java-gradle-2.8","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"eco-java-gradle-2.9","name":"eco-java-gradle-2.9","label":"eco-java-gradle-2.9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/eco-java-gradle-2.9","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"eco-java-gradle-3.0","name":"eco-java-gradle-3.0","label":"eco-java-gradle-3.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/eco-java-gradle-3.0","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"eco-java-gradle-3.1","name":"eco-java-gradle-3.1","label":"eco-java-gradle-3.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/eco-java-gradle-3.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"eco-java-gradle-3.2","name":"eco-java-gradle-3.2","label":"eco-java-gradle-3.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/eco-java-gradle-3.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"eco-java-gradle-3.2.1","name":"eco-java-gradle-3.2.1","label":"eco-java-gradle-3.2.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/eco-java-gradle-3.2.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"eco-java-gradle-3.3","name":"eco-java-gradle-3.3","label":"eco-java-gradle-3.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/eco-java-gradle-3.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"eco-java-gradle-3.4","name":"eco-java-gradle-3.4","label":"eco-java-gradle-3.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/eco-java-gradle-3.4","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"eco-java-gradle-3.4.1","name":"eco-java-gradle-3.4.1","label":"eco-java-gradle-3.4.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/eco-java-gradle-3.4.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"eco-java-gradle-3.5","name":"eco-java-gradle-3.5","label":"eco-java-gradle-3.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/eco-java-gradle-3.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"eco-java-gradle-3.5.1","name":"eco-java-gradle-3.5.1","label":"eco-java-gradle-3.5.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/eco-java-gradle-3.5.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"eco-java-gradle-4.0","name":"eco-java-gradle-4.0","label":"eco-java-gradle-4.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/eco-java-gradle-4.0","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"eco-java-gradle-4.0.1","name":"eco-java-gradle-4.0.1","label":"eco-java-gradle-4.0.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/eco-java-gradle-4.0.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"eco-java-gradle-4.0.2","name":"eco-java-gradle-4.0.2","label":"eco-java-gradle-4.0.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/eco-java-gradle-4.0.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"eco-java-gradle-4.1","name":"eco-java-gradle-4.1","label":"eco-java-gradle-4.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/eco-java-gradle-4.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"hadoop-fips-3.3.6","name":"hadoop-fips-3.3.6","label":"hadoop-fips-3.3.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/hadoop-fips-3.3.6","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"hadoop-fips-3.4.2","name":"hadoop-fips-3.4.2","label":"hadoop-fips-3.4.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/hadoop-fips-3.4.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"hadoop-fips-3.5","name":"hadoop-fips-3.5","label":"hadoop-fips-3.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/hadoop-fips-3.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"bouncycastle","product":"bc-java","name":"bc-java","label":"bc-java","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.55","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 1.55","eol":null,"hubHref":"/vendor/bouncycastle/bc-java"},{"vendor":"debian","product":"bouncycastle","name":"bouncycastle","label":"bouncycastle","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/bouncycastle","purlType":"deb","versions":[{"text":"< 1.56-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.56-1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"bouncycastle","name":"bouncycastle","label":"bouncycastle","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/bouncycastle","purlType":"deb","versions":[{"text":"< 1.49+dfsg-2ubuntu0.1","noFixRecorded":false,"fixedIn":null},{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"< 1.49+dfsg-2ubuntu0.1 | All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"debian","product":"debian_linux","name":"debian linux","label":"debian_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"8.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"8.0","eol":{"isEol":true,"eolDate":"2020-06-30T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"8","label":"8 (Jessie)","eolFrom":"2020-06-30T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":"8.11"},"product":{"name":"debian","label":"Debian","category":"os"}},"hubHref":"/vendor/debian/debian_linux"},{"vendor":"org.bouncycastle","product":"bcprov-jdk14","name":"org.bouncycastle:bcprov-jdk14","label":"bcprov-jdk14","ecosystem":"Maven","cpePart":null,"purl":"pkg:maven/org.bouncycastle/bcprov-jdk14","purlType":"maven","versions":[{"text":"< 1.56","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.56","eol":null,"hubHref":null},{"vendor":"org.bouncycastle","product":"bcprov-jdk15","name":"org.bouncycastle:bcprov-jdk15","label":"bcprov-jdk15","ecosystem":"Maven","cpePart":null,"purl":"pkg:maven/org.bouncycastle/bcprov-jdk15","purlType":"maven","versions":[{"text":"< 1.56","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.56","eol":null,"hubHref":null},{"vendor":"org.bouncycastle","product":"bcprov-jdk15on","name":"org.bouncycastle:bcprov-jdk15on","label":"bcprov-jdk15on","ecosystem":"Maven","cpePart":null,"purl":"pkg:maven/org.bouncycastle/bcprov-jdk15on","purlType":"maven","versions":[{"text":"< 1.56","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.56","eol":null,"hubHref":null}],"affectedCount":41,"eol":{"hasEol":true,"count":1},"references":[{"url":"https://lists.debian.org/debian-lts-announce/2018/07/msg00009.html","label":"lists.debian.org/debian-lts-announce/2018/07/msg00009.html","hostname":"lists.debian.org","tags":["Mailing List","X Refsource MLIST","Third Party Advisory","Advisory","WEB"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2669","label":"access.redhat.com/errata/RHSA-2018:2669","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Advisory","WEB"]},{"url":"https://usn.ubuntu.com/3727-1/","label":"usn.ubuntu.com/3727-1/","hostname":"usn.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU","WEB"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2927","label":"access.redhat.com/errata/RHSA-2018:2927","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Advisory","WEB"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2020.html","label":"www.oracle.com/security-alerts/cpuoct2020.html","hostname":"www.oracle.com","tags":["X Refsource MISC","WEB"]},{"url":"https://security.netapp.com/advisory/ntap-20181127-0004/","label":"security.netapp.com/advisory/ntap-20181127-0004/","hostname":"security.netapp.com","tags":["X Refsource CONFIRM","Advisory"]},{"url":"https://github.com/bcgit/bc-java/commit/1127131c89021612c6eefa26dbe5714c194e7495#diff-d525a20b8acaed791ae2f0f770eb5937","label":"github.com/bcgit/bc-java/commit/1127131c89021612c6eefa26dbe5714c194e7495","hostname":"github.com","tags":["X Refsource CONFIRM","Patch","Third Party Advisory","FIX","WEB"]},{"url":"https://ubuntu.com/security/CVE-2016-1000346","label":"ubuntu.com/security/CVE-2016-1000346","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/notices/USN-3727-1","label":"ubuntu.com/security/notices/USN-3727-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-1000346","label":"www.cve.org/CVERecord?id=CVE-2016-1000346","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2016-1000346","label":"security-tracker.debian.org/tracker/CVE-2016-1000346","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-1000346","label":"nvd.nist.gov/vuln/detail/CVE-2016-1000346","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/advisories/GHSA-fjqm-246c-mwqg","label":"github.com/advisories/GHSA-fjqm-246c-mwqg","hostname":"github.com","tags":["Advisory"]},{"url":"https://github.com/bcgit/bc-java","label":"github.com/bcgit/bc-java","hostname":"github.com","tags":["PACKAGE"]},{"url":"https://security.netapp.com/advisory/ntap-20181127-0004","label":"security.netapp.com/advisory/ntap-20181127-0004","hostname":"security.netapp.com","tags":["WEB"]},{"url":"https://usn.ubuntu.com/3727-1","label":"usn.ubuntu.com/3727-1","hostname":"usn.ubuntu.com","tags":["WEB"]}],"lineage":{"upstream":[],"downstream":["DLA-1418-1","MGASA-2018-0376","OPENSUSE-SU-2024:10661-1","RHSA-2018:2927","USN-3727-1"],"duplicates":[],"related":["OPENSUSE-SU-2024:10661-1","USN-3727-1"]},"timeline":[{"kind":"published","date":"2018-06-04T21:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-06T03:55:27.532Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":18,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T18:27:21.467Z","stale":false,"partial":false}}