Vulnerability Description
In verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c in the gmp plugin in strongSwan 4.x and 5.x before 5.7.0, the RSA implementation based on GMP does not reject excess data after the encoded algorithm OID during PKCS#1 v1.5 signature verification. Similar to the flaw in the same version of strongSwan regarding digestAlgorithm.parameters, a remote attacker can forge signatures when small public exponents are being used, which could lead to impersonation when only an RSA signature is used for IKEv2 authentication.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Strongswan | Strongswan | >= 4.0.0, <= 4.6.4 |
| Debian | Debian Linux | 8.0 |
| Canonical | Ubuntu Linux | 14.04 |
Related Weaknesses (CWE)
References
- http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00077.html
- http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00001.html
- http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00047.html
- https://lists.debian.org/debian-lts-announce/2018/09/msg00032.htmlMailing ListThird Party Advisory
- https://security.gentoo.org/glsa/201811-16Third Party Advisory
- https://usn.ubuntu.com/3771-1/Third Party Advisory
- https://www.debian.org/security/2018/dsa-4305Third Party Advisory
- https://www.strongswan.org/blog/2018/09/24/strongswan-vulnerability-%28cve-2018-
- http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00077.html
- http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00001.html
- http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00047.html
- https://lists.debian.org/debian-lts-announce/2018/09/msg00032.htmlMailing ListThird Party Advisory
- https://security.gentoo.org/glsa/201811-16Third Party Advisory
- https://usn.ubuntu.com/3771-1/Third Party Advisory
- https://www.debian.org/security/2018/dsa-4305Third Party Advisory
FAQ
What is CVE-2018-16151?
CVE-2018-16151 is a vulnerability with a CVSS score of 7.5 (HIGH). In verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c in the gmp plugin in strongSwan 4.x and 5.x before 5.7.0, the RSA implementation based on GMP does not reject excess data after the encoded alg...
How severe is CVE-2018-16151?
CVE-2018-16151 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-16151?
Check the references section above for vendor advisories and patch information. Affected products include: Strongswan Strongswan, Debian Debian Linux, Canonical Ubuntu Linux.