CVE-2018-6459
Fixed in a distro release EPSS 1%
The rsa_pss_params_parse function in libstrongswan/credentials/keys/signature_params.c in strongSwan 5.6.1 allows remote attackers to cause a denial of service via a crafted RSASSA-PSS signature that lacks a mask generation function parameter.
Products: strongswan
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Arch Linux | strongswan | 5.6.2-1 |
| Debian 12 | strongswan | 5.6.2-1 |
| Debian 13 | strongswan | 5.6.2-1 |
| Debian 14 | strongswan | 5.6.2-1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP1 | strongswan | 5.8.2-4.6.14 |
| openSUSE Leap 15.1 | strongswan | 5.8.2-lp151.4.6.1 |
| openSUSE Tumbleweed | strongswan | 5.9.0-1.9 |