EUVD-2018-8006

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

GMP RSA implementation in strongSwan allows signature forgery via excess data in PKCS#1 verification.

Reporter	Title	Published	Views	Family All 86
IBM Security Bulletins	Security Bulletin: Vyatta 5600 vRouter Software Patches - Release 1801-s, 1801-t and 1801-u	5 Dec 201822:20	–	ibm
AlpineLinux	CVE-2018-16151	26 Sep 201821:00	–	alpinelinux
AlpineLinux	CVE-2018-16152	26 Sep 201821:00	–	alpinelinux
ArchLinux	[ASA-201809-4] strongswan: authentication bypass	24 Sep 201800:00	–	archlinux
CVE	CVE-2018-16151	26 Sep 201821:00	–	cve
CVE	CVE-2018-16152	26 Sep 201821:00	–	cve
Cvelist	CVE-2018-16151	26 Sep 201821:00	–	cvelist
Cvelist	CVE-2018-16152	26 Sep 201821:00	–	cvelist
Debian	[SECURITY] [DLA 1522-1] strongswan security update	26 Sep 201816:44	–	debian
Debian	[SECURITY] [DSA 4305-1] strongswan security update	24 Sep 201813:10	–	debian

[
  {
    "enisaIdVendor": [
      {
        "id": "516d561f-243e-3193-878b-2627c1d0e840",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "ddcee48e-f09f-3a37-96f0-b543703fb6cf",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
suse	www.suse.com/security/cve/CVE-2018-16151.html
debian	www.debian.org/security/2018/dsa-4305
ubuntu	www.ubuntu.com/security/CVE-2018-16151
security	www.security.archlinux.org/CVE-2018-16151
security	www.security.gentoo.org/glsa/201811-16
strongswan	www.strongswan.org/blog/2018/09/24/strongswan-vulnerability-%28cve-2018-16151%2C-cve-2018-16152%29.html
lists	www.lists.debian.org/debian-lts-announce/2018/09/msg00032.html
usn	www.usn.ubuntu.com/3771-1/
lists	www.lists.opensuse.org/opensuse-security-announce/2019-11/msg00077.html
lists	www.lists.opensuse.org/opensuse-security-announce/2019-12/msg00001.html

07 Oct 2025 00:30Current

7.6High risk

Vulners AI Score7.6

CVSS 37.5

CVSS 25

EPSS0.0168