PT-2018-13228 · Openswan · Openswan

Sze Yiu Chau · Published 2018-09-26 · Updated 2019-01-10 · CVE-2018-15836

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Openswan versions prior to 2.6.50.1

Description The issue concerns the RSA implementation in the verify signed hash() function, which fails to verify the padding string value during PKCS#1 v1.5 signature verification. This allows a remote attacker to forge signatures, particularly when small public exponents are used. The IKEv2 signature verification is affected when RAW RSA keys are used.

Recommendations For versions prior to 2.6.50.1, update to version 2.6.50.1 or later to resolve the issue.

Fix

Improper Verification of Cryptographic Signature

Weakness Enumeration

CWE-347

Related Identifiers

CVE-2018-15836

Affected Products

Openswan

References · 5

• https://github.com/xelerance/Openswan/commit/0b460be9e287fd335c8ce58129c67bf06065ef51 · Vendor Advisory
• https://github.com/xelerance/Openswan/commit/9eaa6c2a823c1d2b58913506a15f9474bf857a3d · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-15836 · Security Note
• https://osv.dev/vulnerability/CVE-2018-15836 · Vendor Advisory
• https://lists.openswan.org/pipermail/users/2018-August/023761.html · Vendor Advisory