CVE-2018-16151 — Improper Verification of Cryptographic Signature in Strongswan

CWE-347 — Improper Verification of Cryptographic SignatureCWE-287 — Improper Authentication12 documents7 sources
Severity
7.5HIGHNVD
EPSS
1.7%
top 17.74%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
StrongswanDebian StrongswanCanonical Ubuntu Linux+1 more
Timeline
PublishedSep 26
Latest updateMay 13

Description

In verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c in the gmp plugin in strongSwan 4.x and 5.x before 5.7.0, the RSA implementation based on GMP does not reject excess data after the encoded algorithm OID during PKCS#1 v1.5 signature verification. Similar to the flaw in the same version of strongSwan regarding digestAlgorithm.parameters, a remote attacker can forge signatures when small public exponents are being used, which could lead to impersonation when only an RSA signature is used fo…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages4 packages

▶debiandebian/strongswan< strongswan 5.7.0-1 (bookworm)
▶NVDstrongswan/strongswan5.0.0 — 5.7.0+1
▶Debianstrongswan/strongswan< 5.7.0-1+3
▶Ubuntustrongswan/strongswan< 5.1.2-0ubuntu2.10+2

Also affects: Debian Linux 8.0, 9.0, Ubuntu Linux 14.04, 16.04, 18.04

🔴Vulnerability Details

3
GHSA
GHSA-6w9w-qmvw-3v7q: In verify_emsa_pkcs1_signature() in gmp_rsa_public_key↗2022-05-13
▶
OSV
CVE-2018-16151: In verify_emsa_pkcs1_signature() in gmp_rsa_public_key↗2018-09-26
▶
OSV
strongswan vulnerabilities↗2018-09-25
▶

📋Vendor Advisories

3
Ubuntu
strongSwan vulnerabilities↗2018-09-25
▶
Red Hat
strongswan: authentication bypass in verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c↗2018-09-24
▶
Debian
CVE-2018-16151: strongswan - In verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c in the gmp plugin in st...↗2018
▶

💬Community

5
Bugzilla
CVE-2018-17540 strongswan: heap buffer overflow using crafted certificates↗2018-10-03
▶
Bugzilla
CVE-2018-16151 strongswan: authentication bypass in verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c↗2018-10-03
▶
Bugzilla
CVE-2018-16151 strongswan: authentication bypass in verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c [epel-all]↗2018-10-03
▶
Bugzilla
CVE-2018-16152 strongswan: authentication bypass in verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c↗2018-10-03
▶
Bugzilla
CVE-2018-16151 strongswan: authentication bypass in verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c [fedora-all]↗2018-10-03
▶