| Package | Affected versions | Patched versions |
|---|---|---|
| openswan | < 2.6.50.1 | 2.6.50.1 |
In verify_signed_hash() in lib/liboswkeys/signatures.c in Openswan before 2.6.50.1, the RSA implementation does not verify the value of padding string during PKCS#1 v1.5 signature verification. Consequently, a remote attacker can forge signatures when small public exponents are being used. IKEv2 signature verification is affected when RAW RSA keys are used.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free