Back to search
CVE-2018-15836
Published: Sep 26, 2018
Modified: Aug 5, 2024
PUBLISHED
Description
In verify_signed_hash() in lib/liboswkeys/signatures.c in Openswan before 2.6.50.1, the RSA implementation does not verify the value of padding string during PKCS#1 v1.5 signature verification. Consequently, a remote attacker can forge signatures when small public exponents are being used. IKEv2 signature verification is affected when RAW RSA keys are used.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
[openswan-users] 20180824 Xelerance has released Openswan 2.6.50.1
mailing-list
x_refsource_MLIST
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now