CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-15836

In verify_signed_hash() in lib/liboswkeys/signatures.c in Openswan before 2.6.50.1, the RSA implementation does not verify the value of padding string during PKCS#1 v1.5 signature verification. Consequently, a remote attacker can forge signatures when small public exponents are being used. IKEv2 signature verification is affected when RAW RSA keys are used.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 37.4%

CVSS Severity

CVSS v3 Score 7.5

CVSS v2 Score 5.0

References

Products affected by CVE-2018-15836

Xelerance » Openswan » Version: N/A

cpe:2.3:a:xelerance:openswan:-
Xelerance » Openswan » Version: 0.9.9

cpe:2.3:a:xelerance:openswan:0.9.9
Xelerance » Openswan » Version: 2.3.0

cpe:2.3:a:xelerance:openswan:2.3.0
Xelerance » Openswan » Version: 2.3.1

cpe:2.3:a:xelerance:openswan:2.3.1
Xelerance » Openswan » Version: 2.4

cpe:2.3:a:xelerance:openswan:2.4
Xelerance » Openswan » Version: 2.4.0

cpe:2.3:a:xelerance:openswan:2.4.0
Xelerance » Openswan » Version: 2.4.1

cpe:2.3:a:xelerance:openswan:2.4.1
Xelerance » Openswan » Version: 2.4.10

cpe:2.3:a:xelerance:openswan:2.4.10
Xelerance » Openswan » Version: 2.4.11

cpe:2.3:a:xelerance:openswan:2.4.11
Xelerance » Openswan » Version: 2.4.12

cpe:2.3:a:xelerance:openswan:2.4.12
Xelerance » Openswan » Version: 2.4.13

cpe:2.3:a:xelerance:openswan:2.4.13
Xelerance » Openswan » Version: 2.4.2

cpe:2.3:a:xelerance:openswan:2.4.2
Xelerance » Openswan » Version: 2.4.3

cpe:2.3:a:xelerance:openswan:2.4.3
Xelerance » Openswan » Version: 2.4.4

cpe:2.3:a:xelerance:openswan:2.4.4
Xelerance » Openswan » Version: 2.4.5

cpe:2.3:a:xelerance:openswan:2.4.5
Xelerance » Openswan » Version: 2.4.6

cpe:2.3:a:xelerance:openswan:2.4.6
Xelerance » Openswan » Version: 2.4.7

cpe:2.3:a:xelerance:openswan:2.4.7
Xelerance » Openswan » Version: 2.4.8

cpe:2.3:a:xelerance:openswan:2.4.8
Xelerance » Openswan » Version: 2.4.9

cpe:2.3:a:xelerance:openswan:2.4.9
Xelerance » Openswan » Version: 2.5.0

cpe:2.3:a:xelerance:openswan:2.5.0
Xelerance » Openswan » Version: 2.5.00

cpe:2.3:a:xelerance:openswan:2.5.00
Xelerance » Openswan » Version: 2.5.01

cpe:2.3:a:xelerance:openswan:2.5.01
Xelerance » Openswan » Version: 2.5.02

cpe:2.3:a:xelerance:openswan:2.5.02
Xelerance » Openswan » Version: 2.5.03

cpe:2.3:a:xelerance:openswan:2.5.03
Xelerance » Openswan » Version: 2.5.04

cpe:2.3:a:xelerance:openswan:2.5.04
Xelerance » Openswan » Version: 2.5.05

cpe:2.3:a:xelerance:openswan:2.5.05
Xelerance » Openswan » Version: 2.5.06

cpe:2.3:a:xelerance:openswan:2.5.06
Xelerance » Openswan » Version: 2.5.07

cpe:2.3:a:xelerance:openswan:2.5.07
Xelerance » Openswan » Version: 2.5.08

cpe:2.3:a:xelerance:openswan:2.5.08
Xelerance » Openswan » Version: 2.5.09

cpe:2.3:a:xelerance:openswan:2.5.09
Xelerance » Openswan » Version: 2.5.10

cpe:2.3:a:xelerance:openswan:2.5.10
Xelerance » Openswan » Version: 2.5.11

cpe:2.3:a:xelerance:openswan:2.5.11
Xelerance » Openswan » Version: 2.5.12

cpe:2.3:a:xelerance:openswan:2.5.12
Xelerance » Openswan » Version: 2.5.13

cpe:2.3:a:xelerance:openswan:2.5.13
Xelerance » Openswan » Version: 2.5.14

cpe:2.3:a:xelerance:openswan:2.5.14
Xelerance » Openswan » Version: 2.5.15

cpe:2.3:a:xelerance:openswan:2.5.15
Xelerance » Openswan » Version: 2.5.16

cpe:2.3:a:xelerance:openswan:2.5.16
Xelerance » Openswan » Version: 2.5.17

cpe:2.3:a:xelerance:openswan:2.5.17
Xelerance » Openswan » Version: 2.5.18

cpe:2.3:a:xelerance:openswan:2.5.18
Xelerance » Openswan » Version: 2.6.01

cpe:2.3:a:xelerance:openswan:2.6.01
Xelerance » Openswan » Version: 2.6.02

cpe:2.3:a:xelerance:openswan:2.6.02
Xelerance » Openswan » Version: 2.6.03

cpe:2.3:a:xelerance:openswan:2.6.03
Xelerance » Openswan » Version: 2.6.04

cpe:2.3:a:xelerance:openswan:2.6.04
Xelerance » Openswan » Version: 2.6.05

cpe:2.3:a:xelerance:openswan:2.6.05
Xelerance » Openswan » Version: 2.6.06

cpe:2.3:a:xelerance:openswan:2.6.06
Xelerance » Openswan » Version: 2.6.07

cpe:2.3:a:xelerance:openswan:2.6.07
Xelerance » Openswan » Version: 2.6.08

cpe:2.3:a:xelerance:openswan:2.6.08
Xelerance » Openswan » Version: 2.6.09

cpe:2.3:a:xelerance:openswan:2.6.09
Xelerance » Openswan » Version: 2.6.10

cpe:2.3:a:xelerance:openswan:2.6.10
Xelerance » Openswan » Version: 2.6.11

cpe:2.3:a:xelerance:openswan:2.6.11
Xelerance » Openswan » Version: 2.6.12

cpe:2.3:a:xelerance:openswan:2.6.12
Xelerance » Openswan » Version: 2.6.13

cpe:2.3:a:xelerance:openswan:2.6.13
Xelerance » Openswan » Version: 2.6.14

cpe:2.3:a:xelerance:openswan:2.6.14
Xelerance » Openswan » Version: 2.6.15

cpe:2.3:a:xelerance:openswan:2.6.15
Xelerance » Openswan » Version: 2.6.16

cpe:2.3:a:xelerance:openswan:2.6.16
Xelerance » Openswan » Version: 2.6.17

cpe:2.3:a:xelerance:openswan:2.6.17
Xelerance » Openswan » Version: 2.6.18

cpe:2.3:a:xelerance:openswan:2.6.18
Xelerance » Openswan » Version: 2.6.19

cpe:2.3:a:xelerance:openswan:2.6.19
Xelerance » Openswan » Version: 2.6.20

cpe:2.3:a:xelerance:openswan:2.6.20
Xelerance » Openswan » Version: 2.6.21

cpe:2.3:a:xelerance:openswan:2.6.21
Xelerance » Openswan » Version: 2.6.22

cpe:2.3:a:xelerance:openswan:2.6.22
Xelerance » Openswan » Version: 2.6.23

cpe:2.3:a:xelerance:openswan:2.6.23
Xelerance » Openswan » Version: 2.6.24

cpe:2.3:a:xelerance:openswan:2.6.24
Xelerance » Openswan » Version: 2.6.25

cpe:2.3:a:xelerance:openswan:2.6.25
Xelerance » Openswan » Version: 2.6.26

cpe:2.3:a:xelerance:openswan:2.6.26
Xelerance » Openswan » Version: 2.6.27

cpe:2.3:a:xelerance:openswan:2.6.27
Xelerance » Openswan » Version: 2.6.28

cpe:2.3:a:xelerance:openswan:2.6.28
Xelerance » Openswan » Version: 2.6.29

cpe:2.3:a:xelerance:openswan:2.6.29
Xelerance » Openswan » Version: 2.6.30

cpe:2.3:a:xelerance:openswan:2.6.30
Xelerance » Openswan » Version: 2.6.31

cpe:2.3:a:xelerance:openswan:2.6.31
Xelerance » Openswan » Version: 2.6.32

cpe:2.3:a:xelerance:openswan:2.6.32
Xelerance » Openswan » Version: 2.6.33

cpe:2.3:a:xelerance:openswan:2.6.33
Xelerance » Openswan » Version: 2.6.34

cpe:2.3:a:xelerance:openswan:2.6.34
Xelerance » Openswan » Version: 2.6.35

cpe:2.3:a:xelerance:openswan:2.6.35
Xelerance » Openswan » Version: 2.6.36

cpe:2.3:a:xelerance:openswan:2.6.36
Xelerance » Openswan » Version: 2.6.37

cpe:2.3:a:xelerance:openswan:2.6.37
Xelerance » Openswan » Version: 2.6.38

cpe:2.3:a:xelerance:openswan:2.6.38
Xelerance » Openswan » Version: 2.6.39

cpe:2.3:a:xelerance:openswan:2.6.39
Xelerance » Openswan » Version: 2.6.40

cpe:2.3:a:xelerance:openswan:2.6.40
Xelerance » Openswan » Version: 2.6.41

cpe:2.3:a:xelerance:openswan:2.6.41
Xelerance » Openswan » Version: 2.6.42

cpe:2.3:a:xelerance:openswan:2.6.42
Xelerance » Openswan » Version: 2.6.43

cpe:2.3:a:xelerance:openswan:2.6.43
Xelerance » Openswan » Version: 2.6.43.1

cpe:2.3:a:xelerance:openswan:2.6.43.1
Xelerance » Openswan » Version: 2.6.44

cpe:2.3:a:xelerance:openswan:2.6.44
Xelerance » Openswan » Version: 2.6.45

cpe:2.3:a:xelerance:openswan:2.6.45
Xelerance » Openswan » Version: 2.6.46

cpe:2.3:a:xelerance:openswan:2.6.46
Xelerance » Openswan » Version: 2.6.47

cpe:2.3:a:xelerance:openswan:2.6.47
Xelerance » Openswan » Version: 2.6.47.1

cpe:2.3:a:xelerance:openswan:2.6.47.1
Xelerance » Openswan » Version: 2.6.48

cpe:2.3:a:xelerance:openswan:2.6.48
Xelerance » Openswan » Version: 2.6.49

cpe:2.3:a:xelerance:openswan:2.6.49
Xelerance » Openswan » Version: 2.6.49.1

cpe:2.3:a:xelerance:openswan:2.6.49.1
Xelerance » Openswan » Version: 2.6.50

cpe:2.3:a:xelerance:openswan:2.6.50

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-15836

Products

Pricing

Contact Us