Design/Logic Flaw

2018-09-2621:29:00

PRIOn knowledge base

www.prio-n.com

0.003 Low

EPSS

Percentile

68.0%

JSON

In verify_signed_hash() in lib/liboswkeys/signatures.c in Openswan before 2.6.50.1, the RSA implementation does not verify the value of padding string during PKCS#1 v1.5 signature verification. Consequently, a remote attacker can forge signatures when small public exponents are being used. IKEv2 signature verification is affected when RAW RSA keys are used.

CPENameOperatorVersion
openswanlt2.6.50.1

CPE	Name	Operator	Version
	openswan	lt	2.6.50.1

References

github.com/xelerance/Openswan/commit/0b460be9e287fd335c8ce58129c67bf06065ef51

github.com/xelerance/Openswan/commit/9eaa6c2a823c1d2b58913506a15f9474bf857a3d

lists.openswan.org/pipermail/users/2018-August/023761.html

0.003 Low

EPSS

Percentile

68.0%

JSON

Related for PRION:CVE-2018-15836