CVE-2018-9426 – Oracle RSA Weak Key Generation Vulnerability

CVE ID : CVE-2018-9426

Published : Dec. 2, 2024, 10:15 p.m. | 1 hour, 1 minute ago

Description : In  RsaKeyPairGenerator::getNumberOfIterations of RSAKeyPairGenerator.java, an incorrect implementation could cause weak RSA key pairs being generated. This could lead to crypto vulnerability with no additional execution privileges needed. User interaction is not needed for exploitation. Bulletin Fix: The fix is designed to correctly implement the key generation according to FIPS standard.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

CVE-2018-9426 – Oracle RSA Weak Key Generation Vulnerability