Test ID:	1.3.6.1.4.1.25623.1.0.843603
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-3727-1)
Summary:	The remote host is missing an update for the 'bouncycastle' package(s) announced via the USN-3727-1 advisory.
Description:	Summary: The remote host is missing an update for the 'bouncycastle' package(s) announced via the USN-3727-1 advisory. Vulnerability Insight: It was discovered that Bouncy Castle incorrectly handled certain crypto algorithms. A remote attacker could possibly use these issues to obtain sensitive information, including private keys. Affected Software/OS: 'bouncycastle' package(s) on Ubuntu 14.04. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2015-6644 BugTraq ID: 79865 http://www.securityfocus.com/bid/79865 Debian Security Information: DSA-3829 (Google Search) http://www.debian.org/security/2017/dsa-3829 RedHat Security Advisories: RHSA-2017:1832 https://access.redhat.com/errata/RHSA-2017:1832 RedHat Security Advisories: RHSA-2017:2808 https://access.redhat.com/errata/RHSA-2017:2808 RedHat Security Advisories: RHSA-2017:2809 https://access.redhat.com/errata/RHSA-2017:2809 RedHat Security Advisories: RHSA-2017:2810 https://access.redhat.com/errata/RHSA-2017:2810 RedHat Security Advisories: RHSA-2017:2811 https://access.redhat.com/errata/RHSA-2017:2811 RedHat Security Advisories: RHSA-2018:2927 https://access.redhat.com/errata/RHSA-2018:2927 http://www.securitytracker.com/id/1034592 https://usn.ubuntu.com/3727-1/ Common Vulnerability Exposure (CVE) ID: CVE-2015-7940 BugTraq ID: 79091 http://www.securityfocus.com/bid/79091 Debian Security Information: DSA-3417 (Google Search) http://www.debian.org/security/2015/dsa-3417 http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174915.html http://web-in-security.blogspot.ca/2015/09/practical-invalid-curve-attacks.html https://www.oracle.com/security-alerts/cpuapr2020.html http://www.openwall.com/lists/oss-security/2015/10/22/7 http://www.openwall.com/lists/oss-security/2015/10/22/9 RedHat Security Advisories: RHSA-2016:2035 http://rhn.redhat.com/errata/RHSA-2016-2035.html RedHat Security Advisories: RHSA-2016:2036 http://rhn.redhat.com/errata/RHSA-2016-2036.html http://www.securitytracker.com/id/1037036 http://www.securitytracker.com/id/1037046 http://www.securitytracker.com/id/1037053 SuSE Security Announcement: openSUSE-SU-2015:1911 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00012.html Common Vulnerability Exposure (CVE) ID: CVE-2016-1000338 https://github.com/bcgit/bc-java/commit/b0c3ce99d43d73a096268831d0d120ffc89eac7f#diff-3679f5a9d2b939d0d3ee1601a7774fb0 https://www.oracle.com/security-alerts/cpuoct2020.html https://lists.debian.org/debian-lts-announce/2018/07/msg00009.html https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451@%3Csolr-user.lucene.apache.org%3E RedHat Security Advisories: RHSA-2018:2669 https://access.redhat.com/errata/RHSA-2018:2669 Common Vulnerability Exposure (CVE) ID: CVE-2016-1000339 https://github.com/bcgit/bc-java/commit/413b42f4d770456508585c830cfcde95f9b0e93b#diff-54656f860db94b867ba7542430cd2ef0 https://github.com/bcgit/bc-java/commit/8a73f08931450c17c749af067b6a8185abdfd2c0#diff-494fb066bed02aeb76b6c005632943f2 https://security.netapp.com/advisory/ntap-20181127-0004/ Common Vulnerability Exposure (CVE) ID: CVE-2016-1000341 https://github.com/bcgit/bc-java/commit/acaac81f96fec91ab45bd0412beaf9c3acd8defa#diff-e75226a9ca49217a7276b29242ec59ce Common Vulnerability Exposure (CVE) ID: CVE-2016-1000342 https://github.com/bcgit/bc-java/commit/843c2e60f67d71faf81d236f448ebbe56c62c647#diff-25c3c78db788365f36839b3f2d3016b9 Common Vulnerability Exposure (CVE) ID: CVE-2016-1000343 https://github.com/bcgit/bc-java/commit/50a53068c094d6cff37659da33c9b4505becd389#diff-5578e61500abb2b87b300d3114bdfd7d Common Vulnerability Exposure (CVE) ID: CVE-2016-1000345 https://github.com/bcgit/bc-java/commit/21dcb3d9744c83dcf2ff8fcee06dbca7bfa4ef35#diff-4439ce586bf9a13bfec05c0d113b8098 Common Vulnerability Exposure (CVE) ID: CVE-2016-1000346 https://github.com/bcgit/bc-java/commit/1127131c89021612c6eefa26dbe5714c194e7495#diff-d525a20b8acaed791ae2f0f770eb5937
Copyright	Copyright (C) 2018 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.