# CVE-2018-16151: charon-cmd: In verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c in the gmp plugin in strongSwan 4.x and 5.x before 5.7.0, th... CVE-2018-16151 is fixed in 20 products on 1 platform, first by charon-cmd 5.6.2-1ubuntu2.2, released September 24, 2018. It is not reported as exploited. Patch Radar priority: Routine. - Web page: https://patchblox.com/security/cve/CVE-2018-16151 - Priority: Routine - CVSS: n/a (Medium) - EPSS: 0.0189 - CISA KEV: not listed - Exploited (vendor report): no - Publicly disclosed: no - Published: Sep 24, 2018 ## Description In verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c in the gmp plugin in strongSwan 4.x and 5.x before 5.7.0, the RSA implementation based on GMP does not reject excess data after the encoded algorithm OID during PKCS#1 v1.5 signature verification. Similar to the flaw in the same version of strongSwan regarding digestAlgorithm.parameters, a remote attacker can forge signatures when small public exponents are being used, which could lead to impersonation when only an RSA signature is used for IKEv2 authentication. ## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | Linux | charon-cmd Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | [charon-cmd 5.6.2-1ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-charon-cmd-5.6.2-1ubuntu2.2.md) | Sep 24, 2018 | | Linux | charon-systemd Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | [charon-systemd 5.6.2-1ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-charon-systemd-5.6.2-1ubuntu2.2.md) | Sep 24, 2018 | | Linux | libcharon-extra-plugins Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | [libcharon-extra-plugins 5.6.2-1ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libcharon-extra-plugins-5.6.2-1ubuntu2.2.md) | Sep 24, 2018 | | Linux | libcharon-standard-plugins Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | [libcharon-standard-plugins 5.6.2-1ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libcharon-standard-plugins-5.6.2-1ubuntu2.2.md) | Sep 24, 2018 | | Linux | libstrongswan Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | [libstrongswan 5.6.2-1ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libstrongswan-5.6.2-1ubuntu2.2.md) | Sep 24, 2018 | | Linux | libstrongswan-extra-plugins Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | [libstrongswan-extra-plugins 5.6.2-1ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libstrongswan-extra-plugins-5.6.2-1ubuntu2.2.md) | Sep 24, 2018 | | Linux | libstrongswan-standard-plugins Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | [libstrongswan-standard-plugins 5.6.2-1ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libstrongswan-standard-plugins-5.6.2-1ubuntu2.2.md) | Sep 24, 2018 | | Linux | strongswan Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | [strongswan 5.6.2-1ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-strongswan-5.6.2-1ubuntu2.2.md) | Sep 24, 2018 | | Linux | strongswan-charon Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | [strongswan-charon 5.6.2-1ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-strongswan-charon-5.6.2-1ubuntu2.2.md) | Sep 24, 2018 | | Linux | strongswan-libcharon Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | [strongswan-libcharon 5.6.2-1ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-strongswan-libcharon-5.6.2-1ubuntu2.2.md) | Sep 24, 2018 | | Linux | strongswan-nm Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | [strongswan-nm 5.6.2-1ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-strongswan-nm-5.6.2-1ubuntu2.2.md) | Sep 24, 2018 | | Linux | strongswan-pki Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | [strongswan-pki 5.6.2-1ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-strongswan-pki-5.6.2-1ubuntu2.2.md) | Sep 24, 2018 | | Linux | strongswan-scepclient Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | [strongswan-scepclient 5.6.2-1ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-strongswan-scepclient-5.6.2-1ubuntu2.2.md) | Sep 24, 2018 | | Linux | strongswan-starter Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | [strongswan-starter 5.6.2-1ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-strongswan-starter-5.6.2-1ubuntu2.2.md) | Sep 24, 2018 | | Linux | strongswan-swanctl Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | [strongswan-swanctl 5.6.2-1ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-strongswan-swanctl-5.6.2-1ubuntu2.2.md) | Sep 24, 2018 | | Linux | strongswan-tnc-base Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | [strongswan-tnc-base 5.6.2-1ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-strongswan-tnc-base-5.6.2-1ubuntu2.2.md) | Sep 24, 2018 | | Linux | strongswan-tnc-client Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | [strongswan-tnc-client 5.6.2-1ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-strongswan-tnc-client-5.6.2-1ubuntu2.2.md) | Sep 24, 2018 | | Linux | strongswan-tnc-ifmap Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | [strongswan-tnc-ifmap 5.6.2-1ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-strongswan-tnc-ifmap-5.6.2-1ubuntu2.2.md) | Sep 24, 2018 | | Linux | strongswan-tnc-pdp Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | [strongswan-tnc-pdp 5.6.2-1ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-strongswan-tnc-pdp-5.6.2-1ubuntu2.2.md) | Sep 24, 2018 | | Linux | strongswan-tnc-server Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | [strongswan-tnc-server 5.6.2-1ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-strongswan-tnc-server-5.6.2-1ubuntu2.2.md) | Sep 24, 2018 | --- Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo