Unrated

The rsa_pss_params_parse function in libstrongswan/credentials/keys/signature_params.c in strongSwan 5.6.1 allows remote attackers to cause a denial o...

CVE-2018-6459 First seen on SecPulse Feb 21, 2018

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2018-6459 strongswan Fixed in: 5.6.2-1

Original description The description as published by the source.

The rsa_pss_params_parse function in libstrongswan/credentials/keys/signature_params.c in strongSwan 5.6.1 allows remote attackers to cause a denial of service via a crafted RSASSA-PSS signature that lacks a mask generation function parameter.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory security.gentoo.org
web lists.opensuse.org
web strongswan.org

Key facts

Severity: Unrated
Published: Feb 21, 2018
First seen on SecPulse: Feb 21, 2018

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:50