Description
The Bouncy Castle Java library before 1.51 does not validate a point is withing the elliptic curve, which makes it easier for remote attackers to obtain private keys via a series of crafted elliptic curve Diffie Hellman (ECDH) key exchanges, aka an "invalid curve attack."
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | bouncycastle | 1.51-1 | — |
| Debian 13 | bouncycastle | 1.51-1 | — |
| Debian 12 | bouncycastle | 1.51-1 | — |
| Debian 8 | bouncycastle | 1.49+dfsg-3+deb8u1 | DSA-3417-1 |
| Debian 7 | bouncycastle | 1.44+dfsg-3.1+deb7u1 | DSA-3417-1 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 6.0 | bouncycastle | 1.44+dfsg-2+deb6u1 | DLA-361-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 14.04 LTS | bouncycastle | 1.49+dfsg-2ubuntu0.1 | USN-3727-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | bouncycastle | 1.54-1.2 | openSUSE-SU-2024:10486-1 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.bouncycastle:bcprov-jdk14 | < 1.51 | 1.51 | GHSA-4mv7-cq75-3qjm |
| Maven | org.bouncycastle:bcprov-jdk15 | < 1.51 | 1.51 | GHSA-4mv7-cq75-3qjm |
| Maven | org.bouncycastle:bcprov-jdk15on | < 1.51 | 1.51 | GHSA-4mv7-cq75-3qjm |
Advisories 6
- USN-3727-1 bouncycastle vulnerabilities Ubuntu Security Notices (USN) · Apr 27, 2026
- DSA-3417-1 bouncycastle - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DLA-361-1 bouncycastle - security update Debian Security (DSA / DLA) · Mar 9, 2026
- openSUSE-SU-2024:10486-1 bouncycastle-1.54-1.2 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- WID-SEC-2022-1375 JFrog Artifactory: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 12, 2025
- WID-SEC-2024-3616 Red Hat JBoss Fuse: Mehrere Schwachstellen BSI CERT-Bund (WID) · Dec 5, 2024
References
- RHSA-2016:2035 vendor-advisory
- http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
- http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html
- https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
- 79091 vdb-entry
- openSUSE-SU-2015:1911 vendor-advisory
- FEDORA-2015-7d95466eda vendor-advisory
- http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
- RHSA-2016:2036 vendor-advisory
- http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
- USN-3727-1 vendor-advisory
- [oss-security] 20151022 Re: CVE Request: invalid curve attack on bouncycastle mailing-list
- http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html
- 1037036 vdb-entry
- [oss-security] 20151022 CVE Request: invalid curve attack on bouncycastle mailing-list
- DSA-3417 vendor-advisory
- http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html
- http://web-in-security.blogspot.ca/2015/09/practical-invalid-curve-attacks.html
- 1037046 vdb-entry
- 1037053 vdb-entry
- https://www.oracle.com/security-alerts/cpuapr2020.html