CVE-2018-15836

In verify_signed_hash() in lib/liboswkeys/signatures.c in Openswan before 2.6.50.1, the RSA implementation does not verify the value of padding string during PKCS#1 v1.5 signature verification. Consequently, a remote attacker can forge signatures when small public exponents are being used. IKEv2 signature verification is affected when RAW RSA keys are used.

• CWE-347

• https://github.com/xelerance/Openswan/commit/0b460be9e287fd335c8ce58129c67bf06065ef51Patch, Vendor Advisory
• https://github.com/xelerance/Openswan/commit/9eaa6c2a823c1d2b58913506a15f9474bf857a3dPatch, Vendor Advisory
• https://lists.openswan.org/pipermail/users/2018-August/023761.htmlRelease Notes, Vendor Advisory
• https://github.com/xelerance/Openswan/commit/0b460be9e287fd335c8ce58129c67bf06065ef51Patch, Vendor Advisory
• https://github.com/xelerance/Openswan/commit/9eaa6c2a823c1d2b58913506a15f9474bf857a3dPatch, Vendor Advisory
• https://lists.openswan.org/pipermail/users/2018-August/023761.htmlRelease Notes, Vendor Advisory

Published

Sep 26, 2018

Last Modified

Jun 17, 2026

Status

Modified

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-15822The flv_write_packet function in libavformat/flvenc.c in FFm…7.5
• CVE-2018-1583IBM StoredIQ 7.6 could allow an authenticated attacker to by…
• CVE-2018-15832upc.exe in Ubisoft Uplay Desktop Client versions 63.0.5699.0…
• CVE-2018-15833In Vanilla before 2.6.1, the polling functionality allows In…
• CVE-2018-15834In radare2 before 2.9.0, a heap overflow vulnerability exist…
• CVE-2018-15835Android 1.0 through 9.0 has Insecure Permissions. The Androi…
• CVE-2018-15839D-Link DIR-615 devices have a buffer overflow via a long Aut…9.8
• CVE-2018-1584IBM Maximo Asset Management 7.6 is vulnerable to cross-site …5.4
• CVE-2018-15840TP-Link TL-WR840N devices allow remote attackers to cause a …
• CVE-2018-15842WolfCMS 0.8.3.1 has XSS via the /?/admin/page/add slug param…
• CVE-2018-15843GetSimple CMS 3.3.14 has XSS via the admin/edit.php "Add New…
• CVE-2018-15844An issue was discovered in DamiCMS 6.0.0. There is an CSRF v…