CVE-2018-16151
26.09.2018, 21:29
In verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c in the gmp plugin in strongSwan 4.x and 5.x before 5.7.0, the RSA implementation based on GMP does not reject excess data after the encoded algorithm OID during PKCS#1 v1.5 signature verification. Similar to the flaw in the same version of strongSwan regarding digestAlgorithm.parameters, a remote attacker can forge signatures when small public exponents are being used, which could lead to impersonation when only an RSA signature is used for IKEv2 authentication.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| strongswan | strongswan | 4.0.0 ≤ 𝑥 ≤ 4.6.4 |
| strongswan | strongswan | 5.0.0 ≤ 𝑥 < 5.7.0 |
| debian | debian_linux | 8.0 |
| debian | debian_linux | 9.0 |
| canonical | ubuntu_linux | 14.04 |
| canonical | ubuntu_linux | 16.04 |
| canonical | ubuntu_linux | 18.04 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| strongswan |
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| strongswan-doc |
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| strongswan-hmac |
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| strongswan-ipsec |
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| strongswan-libs0 |
|
Common Weakness Enumeration
References