The rsa_pss_params_parse function in libstrongswan/credentials/keys/signature_params.c in strongSwan 5.6.1 allows remote attackers to cause a denial of service via a crafted RSASSA-PSS signature that lacks a mask generation function parameter.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - The rsa_pss_params_parse function in libstrongswan/credentials/keys/signature_params.c in strongSwan 5.6.1
    allows remote attackers to cause a denial of service via a crafted RSASSA-PSS signature that lacks a mask
    generation function parameter. (CVE-2018-6459)

The remote host is affected by the vulnerability described in GLSA-201811-16 (strongSwan: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in strongSwan. Please       review the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could cause a Denial of Service condition or       impersonate a user.
  Workaround :

    There is no known workaround at this time.

Strongswan Release Notes reports :

Fixed a DoS vulnerability in the parser for PKCS#1 RSASSA-PSS signatures that was caused by insufficient input validation. One of the configurable parameters in algorithm identifier structures for RSASSA-PSS signatures is the mask generation function (MGF). Only MGF1 is currently specified for this purpose. However, this in turn takes itself a parameter that specifies the underlying hash function.
strongSwan's parser did not correctly handle the case of this parameter being absent, causing an undefined data read. his vulnerability has been registered as CVE-2018-6459.

ID	Name	Product	Family	Severity
400716	Alpine: multiple py3-vici packages, multiple strongswan packages: security update to 5.6.1-r0 (deprecated)	Tenable Cloud Security	Alpine Linux Local Security Checks	medium
400716	Alpine: multiple py3-vici packages, multiple strongswan packages: security update to 5.6.1-r0 (deprecated)	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	medium
135007	openSUSE Security Update : strongswan (openSUSE-2020-403)	Nessus	SuSE Local Security Checks	high
134852	SUSE SLED15 / SLES15 Security Update : strongswan (SUSE-SU-2020:0743-1)	Nessus	SuSE Local Security Checks	high
119161	GLSA-201811-16 : strongSwan: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
107111	FreeBSD : strongswan - Insufficient input validation in RSASSA-PSS signature parser (6a449a37-1570-11e8-8e00-000c294a5758)	Nessus	FreeBSD Local Security Checks	medium

Detections

Analytics

CVE-2018-6459

medium

Tenable Plugins

medium

medium

high

high

high

medium