{"id":"CVE-2018-16152","published":"2018-09-26T21:00:00Z","modified":"2025-12-03T20:24:34Z","title":"In verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c in the gmp plugin in strongSwan 4.x and 5.x before 5.7.0, the…","vendor":null,"product":null,"tier":"tail","description":{"text":"In verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c in the gmp plugin in strongSwan 4.x and 5.x before 5.7.0, the RSA implementation based on GMP does not reject excess data in the digestAlgorithm.parameters field during PKCS#1 v1.5 signature verification. Consequently, a remote attacker can forge signatures when small public exponents are being used, which could lead to impersonation when only an RSA signature is used for IKEv2 authentication. This is a variant of CVE-2006-4790 and CVE-2014-1568.","provenance":"source","from":"CVE.org"},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","provenance":"source","from":"CISA ADP Vulnrichment"},"epss":{"score":0.01888,"percentile":0.79511,"provenance":"source"},"cwes":[{"id":"CWE-347","name":"Improper Verification of Cryptographic Signature"}],"references":[{"url":"https://www.debian.org/security/2018/dsa-4305","tags":["vendor-advisory","x_refsource_DEBIAN"]},{"url":"https://security.gentoo.org/glsa/201811-16","tags":["vendor-advisory","x_refsource_GENTOO"]},{"url":"https://www.strongswan.org/blog/2018/09/24/strongswan-vulnerability-%28cve-2018-16151%2C-cve-2018-16152%29.html","tags":["x_refsource_CONFIRM"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/09/msg00032.html","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://usn.ubuntu.com/3771-1/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00077.html","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00001.html","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00047.html","tags":["vendor-advisory","x_refsource_SUSE"]}],"priority":{"score":21.2,"factors":[{"name":"EPSS percentile","points":15.9},{"name":"CVSS severity","points":5.25}]},"euvd":{"id":"EUVD-2018-8007","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-red-hat-enterprise-linux-3-cve-2006-4339","parents":[{"from":"CVE-2006-4790","to":"CVE-2018-16152","relation":"variant","confidence":"high","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"variant","quote":"This is a variant of CVE-2006-4790 and CVE-2014-1568.","from":"CVE.org","in":"CVE-2018-16152"}]},{"from":"CVE-2014-1568","to":"CVE-2018-16152","relation":"variant","confidence":"high","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"variant","quote":"This is a variant of CVE-2006-4790 and CVE-2014-1568.","from":"CVE.org","in":"CVE-2018-16152"}]}]}}