CVE-2018-6459

MEDIUM 5.3CVE-2018-6459 · Published 20/02/2018 · updated 17/06/2026

In short

CVE-2018-6459 is a MEDIUM (CVSS 5.3) vulnerability affecting strongswan (strongswan).
Chance of exploitation in the next 30 days (EPSS): 1.0%, higher than 64.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
strongswan strongswan	`= 5.6.1`	No fix yet

Description

The rsa_pss_params_parse function in libstrongswan/credentials/keys/signature_params.c in strongSwan 5.6.1 allows remote attackers to cause a denial of service via a crafted RSASSA-PSS signature that lacks a mask generation function parameter.

References

lists.opensuse.org/opensuse-security-announce/2020-03/msg00047.html
security.gentoo.org/glsa/201811-16 · Third Party Advisory
strongswan.org/blog/2018/02/19/strongswan-vulnerability-%28cve-2018-6459%29.html

More vulnerabilities in strongswan

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

strongswan

= 5.6.1

No fix yet

More vulnerabilities in strongswan

See all →