Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2018-6459HistoryFeb 20, 2018 - 3:29 p.m.
CVE-2018-6459
2018-02-2015:29:00
Debian Security Bug Tracker
security-tracker.debian.org
8
0.004 Low
EPSS
Percentile
73.9%
The rsa_pss_params_parse function in libstrongswan/credentials/keys/signature_params.c in strongSwan 5.6.1 allows remote attackers to cause a denial of service via a crafted RSASSA-PSS signature that lacks a mask generation function parameter.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | strongswan | < 5.6.2-1 | strongswan_5.6.2-1_all.deb |
| Debian | 11 | all | strongswan | < 5.6.2-1 | strongswan_5.6.2-1_all.deb |
| Debian | 10 | all | strongswan | < 5.6.2-1 | strongswan_5.6.2-1_all.deb |
| Debian | 999 | all | strongswan | < 5.6.2-1 | strongswan_5.6.2-1_all.deb |
| Debian | 13 | all | strongswan | < 5.6.2-1 | strongswan_5.6.2-1_all.deb |
Related
osv
osv
CVE-2018-6459
2018-02-20 15:29:00
cvelist
cvelist
CVE-2018-6459
2018-02-20 15:00:00
cve
cve
CVE-2018-6459
2018-02-20 15:29:00
nessus
nessus
archlinux
archlinux
[ASA-201802-10] strongswan: denial of service
2018-02-21 00:00:00
freebsd
freebsd
strongswan - Insufficient input validation in RSASSA-PSS signature parser
2018-01-31 00:00:00
redhatcve
redhatcve
CVE-2018-6459
2018-02-21 13:19:01
prion
prion
Session fixation
2018-02-20 15:29:00
ubuntucve
ubuntucve
CVE-2018-6459
2018-02-19 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2020:0743-1)
2021-06-09 00:00:00
openSUSE: Security Advisory for strongswan (openSUSE-SU-2020:0403-1)
2020-03-30 00:00:00
suse
suse
Security update for strongswan (moderate)
2020-03-29 00:00:00
gentoo
gentoo
strongSwan: Multiple vulnerabilities
2018-11-26 00:00:00