CVE:CVE-2018-5382
CNNVD:CNNVD-201803-1057
Bouncy Castle BC是Bouncy Castle组织的一个用于C＃和Java应用程序的加密库。
Bouncy Castle BKS-V1中存在加密问题漏洞，该漏洞源于Bouncy Castle BKS-V1文件所使用HMAC的长度仅为16位。攻击者可利用该漏洞绕过BKS完整性检测。
solution:Upgrade bouncycastle legion-of-the-bouncy-castle-java-crytography-api to a higher version than 1.49,and avoid the version (,1.49]; Upgrade redhat satellite to a higher version than 6.4,and avoid the version 6.4; Upgrade redhat satellite_capsule to a higher version than 6.4,and avoid the version 6.4