CVE-2018-16152
charon-cmd: In verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c in the gmp plugin in strongSwan 4.x and 5.x before 5.7.0, th...
CVE-2018-16152 is fixed in 20 products on 1 platform, first by charon-cmd 5.6.2-1ubuntu2.2, released September 24, 2018. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0189
79th percentile
In verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c in the gmp plugin in strongSwan 4.x and 5.x before 5.7.0, the RSA implementation based on GMP does not reject excess data in the digestAlgorithm.parameters field during PKCS#1 v1.5 signature verification. Consequently, a remote attacker can forge signatures when small public exponents are being used, which could lead to impersonation when only an RSA signature is used for IKEv2 authentication. This is a variant of CVE-2006-4790 and CVE-2014-1568.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| charon-cmd · Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | charon-cmd 5.6.2-1ubuntu2.2 | Sep 24, 2018 |
| charon-systemd · Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | charon-systemd 5.6.2-1ubuntu2.2 | Sep 24, 2018 |
| libcharon-extra-plugins · Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | libcharon-extra-plugins 5.6.2-1ubuntu2.2 | Sep 24, 2018 |
| libcharon-standard-plugins · Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | libcharon-standard-plugins 5.6.2-1ubuntu2.2 | Sep 24, 2018 |
| libstrongswan · Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | libstrongswan 5.6.2-1ubuntu2.2 | Sep 24, 2018 |
| libstrongswan-extra-plugins · Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | libstrongswan-extra-plugins 5.6.2-1ubuntu2.2 | Sep 24, 2018 |
| libstrongswan-standard-plugins · Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | libstrongswan-standard-plugins 5.6.2-1ubuntu2.2 | Sep 24, 2018 |
| strongswan · Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | strongswan 5.6.2-1ubuntu2.2 | Sep 24, 2018 |
| strongswan-charon · Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | strongswan-charon 5.6.2-1ubuntu2.2 | Sep 24, 2018 |
| strongswan-libcharon · Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | strongswan-libcharon 5.6.2-1ubuntu2.2 | Sep 24, 2018 |
| strongswan-nm · Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | strongswan-nm 5.6.2-1ubuntu2.2 | Sep 24, 2018 |
| strongswan-pki · Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | strongswan-pki 5.6.2-1ubuntu2.2 | Sep 24, 2018 |
| strongswan-scepclient · Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | strongswan-scepclient 5.6.2-1ubuntu2.2 | Sep 24, 2018 |
| strongswan-starter · Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | strongswan-starter 5.6.2-1ubuntu2.2 | Sep 24, 2018 |
| strongswan-swanctl · Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | strongswan-swanctl 5.6.2-1ubuntu2.2 | Sep 24, 2018 |
| strongswan-tnc-base · Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | strongswan-tnc-base 5.6.2-1ubuntu2.2 | Sep 24, 2018 |
| strongswan-tnc-client · Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | strongswan-tnc-client 5.6.2-1ubuntu2.2 | Sep 24, 2018 |
| strongswan-tnc-ifmap · Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | strongswan-tnc-ifmap 5.6.2-1ubuntu2.2 | Sep 24, 2018 |
| strongswan-tnc-pdp · Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | strongswan-tnc-pdp 5.6.2-1ubuntu2.2 | Sep 24, 2018 |
| strongswan-tnc-server · Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | strongswan-tnc-server 5.6.2-1ubuntu2.2 | Sep 24, 2018 |