CVE-2018-16151

EPSS 1.89%
Veröffentlicht 26.09.2018 21:29:01
Zuletzt bearbeitet 03.12.2025 21:15:50
Erkennungen
Login

In verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c in the gmp plugin in strongSwan 4.x and 5.x before 5.7.0, the RSA implementation based on GMP does not reject excess data after the encoded algorithm OID during PKCS#1 v1.5 signature verification. Similar to the flaw in the same version of strongSwan regarding digestAlgorithm.parameters, a remote attacker can forge signatures when small public exponents are being used, which could lead to impersonation when only an RSA signature is used for IKEv2 authentication.

Betroffene Produkte Warnungen 0 Metriken 4 CWE 1 Referenzen 11

NVD 7 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Strongswan ≫ Strongswan Version >= 4.0.0 <= 4.6.4

Strongswan ≫ Strongswan Version >= 5.0.0 < 5.7.0

Debian ≫ Debian Linux Version 8.0

Debian ≫ Debian Linux Version 9.0

Canonical ≫ Ubuntu Linux Version 14.04 SwEdition lts

Canonical ≫ Ubuntu Linux Version 16.04 SwEdition lts

Canonical ≫ Ubuntu Linux Version 18.04 SwEdition lts

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.89%	0.768

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.5	3.9	3.6	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
NIST	5	10	2.9	AV:N/AC:L/Au:N/C:N/I:P/A:N
CISA-ADP	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N