CVE-2018-6459 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2018-6459 Interim 1 35 2025-11-05T03:34:50Z current 2021-05-30T14:10:40Z 2025-11-05T03:34:50Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2018-6459 The rsa_pss_params_parse function in libstrongswan/credentials/keys/signature_params.c in strongSwan 5.6.1 allows remote attackers to cause a denial of service via a crafted RSASSA-PSS signature that lacks a mask generation function parameter. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2020-March/006635.html E-Mail link for SUSE-SU-2020:0743-1 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DECZRHNDXHGFAFDGFC4MOC7O556TQEJF/ E-Mail link for openSUSE-SU-2020:0403-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Workstation Extension 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Workstation Extension 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Workstation Extension 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Server 11 SP1 for Teradata SUSE Linux Enterprise Server 11 SP3 for Teradata SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Workstation Extension 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Workstation Extension 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Workstation Extension 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Workstation Extension 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Workstation Extension 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Workstation Extension 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 openSUSE Leap 15.1 openSUSE Tumbleweed strongswan strongswan-5.8.2-11.8.4 strongswan-5.8.2-150400.17.24 strongswan-5.8.2-4.6.14 strongswan-5.8.2-9.2 strongswan-5.8.2-lp151.4.6.1 strongswan-5.9.0-1.9 strongswan-5.9.12-150600.1.64 strongswan-5.9.14-150700.1.42 strongswan-5.9.7-150500.3.4 strongswan-6.0.1-160000.2.2 strongswan-doc strongswan-doc-5.8.2-11.8.4 strongswan-doc-5.8.2-150400.17.24 strongswan-doc-5.8.2-4.6.14 strongswan-doc-5.8.2-9.2 strongswan-doc-5.8.2-lp151.4.6.1 strongswan-doc-5.9.0-1.9 strongswan-doc-5.9.12-150600.1.64 strongswan-doc-5.9.14-150700.1.42 strongswan-doc-5.9.7-150500.3.4 strongswan-doc-6.0.1-160000.2.2 strongswan-fips-6.0.1-160000.2.2 strongswan-hmac strongswan-hmac-5.8.2-11.8.4 strongswan-hmac-5.8.2-150400.17.24 strongswan-hmac-5.8.2-4.6.14 strongswan-hmac-5.8.2-9.2 strongswan-hmac-5.8.2-lp151.4.6.1 strongswan-hmac-5.9.0-1.9 strongswan-hmac-5.9.12-150600.1.64 strongswan-hmac-5.9.14-150700.1.42 strongswan-hmac-5.9.7-150500.3.4 strongswan-ipsec strongswan-ipsec-5.8.2-11.8.4 strongswan-ipsec-5.8.2-150400.17.24 strongswan-ipsec-5.8.2-4.6.14 strongswan-ipsec-5.8.2-9.2 strongswan-ipsec-5.8.2-lp151.4.6.1 strongswan-ipsec-5.9.0-1.9 strongswan-ipsec-5.9.12-150600.1.64 strongswan-ipsec-5.9.14-150700.1.42 strongswan-ipsec-5.9.7-150500.3.4 strongswan-ipsec-6.0.1-160000.2.2 strongswan-libs0 strongswan-libs0-5.8.2-11.8.4 strongswan-libs0-5.8.2-150400.17.24 strongswan-libs0-5.8.2-4.6.14 strongswan-libs0-5.8.2-9.2 strongswan-libs0-5.8.2-lp151.4.6.1 strongswan-libs0-5.9.0-1.9 strongswan-libs0-5.9.12-150600.1.64 strongswan-libs0-5.9.14-150700.1.42 strongswan-libs0-5.9.7-150500.3.4 strongswan-mysql-5.8.2-lp151.4.6.1 strongswan-mysql-5.9.0-1.9 strongswan-mysql-6.0.1-160000.2.2 strongswan-nm-5.8.2-11.8.4 strongswan-nm-5.8.2-150400.17.24 strongswan-nm-5.8.2-9.2 strongswan-nm-5.8.2-lp151.4.6.1 strongswan-nm-5.9.0-1.9 strongswan-nm-6.0.1-160000.2.2 strongswan-sqlite-5.8.2-lp151.4.6.1 strongswan-sqlite-5.9.0-1.9 strongswan-sqlite-6.0.1-160000.2.2 strongswan-5.8.2-4.6.14 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 strongswan-doc-5.8.2-4.6.14 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 strongswan-hmac-5.8.2-4.6.14 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 strongswan-ipsec-5.8.2-4.6.14 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 strongswan-libs0-5.8.2-4.6.14 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 strongswan-5.8.2-9.2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 strongswan-doc-5.8.2-9.2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 strongswan-hmac-5.8.2-9.2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 strongswan-ipsec-5.8.2-9.2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 strongswan-libs0-5.8.2-9.2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 strongswan-5.8.2-11.8.4 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 strongswan-doc-5.8.2-11.8.4 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 strongswan-hmac-5.8.2-11.8.4 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 strongswan-ipsec-5.8.2-11.8.4 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 strongswan-libs0-5.8.2-11.8.4 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 strongswan-5.8.2-150400.17.24 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 strongswan-doc-5.8.2-150400.17.24 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 strongswan-hmac-5.8.2-150400.17.24 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 strongswan-ipsec-5.8.2-150400.17.24 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 strongswan-libs0-5.8.2-150400.17.24 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 strongswan-5.9.7-150500.3.4 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 strongswan-doc-5.9.7-150500.3.4 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 strongswan-hmac-5.9.7-150500.3.4 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 strongswan-ipsec-5.9.7-150500.3.4 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 strongswan-libs0-5.9.7-150500.3.4 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 strongswan-5.9.12-150600.1.64 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 strongswan-doc-5.9.12-150600.1.64 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 strongswan-hmac-5.9.12-150600.1.64 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 strongswan-ipsec-5.9.12-150600.1.64 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 strongswan-libs0-5.9.12-150600.1.64 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 strongswan-5.9.14-150700.1.42 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 strongswan-doc-5.9.14-150700.1.42 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 strongswan-hmac-5.9.14-150700.1.42 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 strongswan-ipsec-5.9.14-150700.1.42 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 strongswan-libs0-5.9.14-150700.1.42 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 strongswan-6.0.1-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 strongswan-doc-6.0.1-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 strongswan-fips-6.0.1-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 strongswan-ipsec-6.0.1-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 strongswan-mysql-6.0.1-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 strongswan-nm-6.0.1-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 strongswan-sqlite-6.0.1-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 strongswan-nm-5.8.2-9.2 as a component of SUSE Linux Enterprise Workstation Extension 15 SP2 strongswan-nm-5.8.2-11.8.4 as a component of SUSE Linux Enterprise Workstation Extension 15 SP3 strongswan-nm-5.8.2-150400.17.24 as a component of SUSE Linux Enterprise Workstation Extension 15 SP4 strongswan-5.8.2-lp151.4.6.1 as a component of openSUSE Leap 15.1 strongswan-doc-5.8.2-lp151.4.6.1 as a component of openSUSE Leap 15.1 strongswan-hmac-5.8.2-lp151.4.6.1 as a component of openSUSE Leap 15.1 strongswan-ipsec-5.8.2-lp151.4.6.1 as a component of openSUSE Leap 15.1 strongswan-libs0-5.8.2-lp151.4.6.1 as a component of openSUSE Leap 15.1 strongswan-mysql-5.8.2-lp151.4.6.1 as a component of openSUSE Leap 15.1 strongswan-nm-5.8.2-lp151.4.6.1 as a component of openSUSE Leap 15.1 strongswan-sqlite-5.8.2-lp151.4.6.1 as a component of openSUSE Leap 15.1 strongswan-5.9.0-1.9 as a component of openSUSE Tumbleweed strongswan-doc-5.9.0-1.9 as a component of openSUSE Tumbleweed strongswan-hmac-5.9.0-1.9 as a component of openSUSE Tumbleweed strongswan-ipsec-5.9.0-1.9 as a component of openSUSE Tumbleweed strongswan-libs0-5.9.0-1.9 as a component of openSUSE Tumbleweed strongswan-mysql-5.9.0-1.9 as a component of openSUSE Tumbleweed strongswan-nm-5.9.0-1.9 as a component of openSUSE Tumbleweed strongswan-sqlite-5.9.0-1.9 as a component of openSUSE Tumbleweed strongswan as a component of SUSE Linux Enterprise Server 11 SP1 for Teradata strongswan as a component of SUSE Linux Enterprise Server 11 SP3 for Teradata strongswan as a component of SUSE Linux Enterprise Server 12 SP1-LTSS strongswan-doc as a component of SUSE Linux Enterprise Server 12 SP1-LTSS strongswan-hmac as a component of SUSE Linux Enterprise Server 12 SP1-LTSS strongswan-ipsec as a component of SUSE Linux Enterprise Server 12 SP1-LTSS strongswan-libs0 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS The rsa_pss_params_parse function in libstrongswan/credentials/keys/signature_params.c in strongSwan 5.6.1 allows remote attackers to cause a denial of service via a crafted RSASSA-PSS signature that lacks a mask generation function parameter. CVE-2018-6459 SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-5.8.2-4.6.14 SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-doc-5.8.2-4.6.14 SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-hmac-5.8.2-4.6.14 SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-ipsec-5.8.2-4.6.14 SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-libs0-5.8.2-4.6.14 SUSE Linux Enterprise Module for Basesystem 15 SP2:strongswan-5.8.2-9.2 SUSE Linux Enterprise Module for Basesystem 15 SP2:strongswan-doc-5.8.2-9.2 SUSE Linux Enterprise Module for Basesystem 15 SP2:strongswan-hmac-5.8.2-9.2 SUSE Linux Enterprise Module for Basesystem 15 SP2:strongswan-ipsec-5.8.2-9.2 SUSE Linux Enterprise Module for Basesystem 15 SP2:strongswan-libs0-5.8.2-9.2 SUSE Linux Enterprise Module for Basesystem 15 SP3:strongswan-5.8.2-11.8.4 SUSE Linux Enterprise Module for Basesystem 15 SP3:strongswan-doc-5.8.2-11.8.4 SUSE Linux Enterprise Module for Basesystem 15 SP3:strongswan-hmac-5.8.2-11.8.4 SUSE Linux Enterprise Module for Basesystem 15 SP3:strongswan-ipsec-5.8.2-11.8.4 SUSE Linux Enterprise Module for Basesystem 15 SP3:strongswan-libs0-5.8.2-11.8.4 SUSE Linux Enterprise Module for Basesystem 15 SP4:strongswan-5.8.2-150400.17.24 SUSE Linux Enterprise Module for Basesystem 15 SP4:strongswan-doc-5.8.2-150400.17.24 SUSE Linux Enterprise Module for Basesystem 15 SP4:strongswan-hmac-5.8.2-150400.17.24 SUSE Linux Enterprise Module for Basesystem 15 SP4:strongswan-ipsec-5.8.2-150400.17.24 SUSE Linux Enterprise Module for Basesystem 15 SP4:strongswan-libs0-5.8.2-150400.17.24 SUSE Linux Enterprise Module for Basesystem 15 SP5:strongswan-5.9.7-150500.3.4 SUSE Linux Enterprise Module for Basesystem 15 SP5:strongswan-doc-5.9.7-150500.3.4 SUSE Linux Enterprise Module for Basesystem 15 SP5:strongswan-hmac-5.9.7-150500.3.4 SUSE Linux Enterprise Module for Basesystem 15 SP5:strongswan-ipsec-5.9.7-150500.3.4 SUSE Linux Enterprise Module for Basesystem 15 SP5:strongswan-libs0-5.9.7-150500.3.4 SUSE Linux Enterprise Module for Basesystem 15 SP6:strongswan-5.9.12-150600.1.64 SUSE Linux Enterprise Module for Basesystem 15 SP6:strongswan-doc-5.9.12-150600.1.64 SUSE Linux Enterprise Module for Basesystem 15 SP6:strongswan-hmac-5.9.12-150600.1.64 SUSE Linux Enterprise Module for Basesystem 15 SP6:strongswan-ipsec-5.9.12-150600.1.64 SUSE Linux Enterprise Module for Basesystem 15 SP6:strongswan-libs0-5.9.12-150600.1.64 SUSE Linux Enterprise Module for Basesystem 15 SP7:strongswan-5.9.14-150700.1.42 SUSE Linux Enterprise Module for Basesystem 15 SP7:strongswan-doc-5.9.14-150700.1.42 SUSE Linux Enterprise Module for Basesystem 15 SP7:strongswan-hmac-5.9.14-150700.1.42 SUSE Linux Enterprise Module for Basesystem 15 SP7:strongswan-ipsec-5.9.14-150700.1.42 SUSE Linux Enterprise Module for Basesystem 15 SP7:strongswan-libs0-5.9.14-150700.1.42 SUSE Linux Enterprise Server 16.0:strongswan-6.0.1-160000.2.2 SUSE Linux Enterprise Server 16.0:strongswan-doc-6.0.1-160000.2.2 SUSE Linux Enterprise Server 16.0:strongswan-fips-6.0.1-160000.2.2 SUSE Linux Enterprise Server 16.0:strongswan-ipsec-6.0.1-160000.2.2 SUSE Linux Enterprise Server 16.0:strongswan-mysql-6.0.1-160000.2.2 SUSE Linux Enterprise Server 16.0:strongswan-nm-6.0.1-160000.2.2 SUSE Linux Enterprise Server 16.0:strongswan-sqlite-6.0.1-160000.2.2 SUSE Linux Enterprise Workstation Extension 15 SP2:strongswan-nm-5.8.2-9.2 SUSE Linux Enterprise Workstation Extension 15 SP3:strongswan-nm-5.8.2-11.8.4 SUSE Linux Enterprise Workstation Extension 15 SP4:strongswan-nm-5.8.2-150400.17.24 openSUSE Leap 15.1:strongswan-5.8.2-lp151.4.6.1 openSUSE Leap 15.1:strongswan-doc-5.8.2-lp151.4.6.1 openSUSE Leap 15.1:strongswan-hmac-5.8.2-lp151.4.6.1 openSUSE Leap 15.1:strongswan-ipsec-5.8.2-lp151.4.6.1 openSUSE Leap 15.1:strongswan-libs0-5.8.2-lp151.4.6.1 openSUSE Leap 15.1:strongswan-mysql-5.8.2-lp151.4.6.1 openSUSE Leap 15.1:strongswan-nm-5.8.2-lp151.4.6.1 openSUSE Leap 15.1:strongswan-sqlite-5.8.2-lp151.4.6.1 openSUSE Tumbleweed:strongswan-5.9.0-1.9 openSUSE Tumbleweed:strongswan-doc-5.9.0-1.9 openSUSE Tumbleweed:strongswan-hmac-5.9.0-1.9 openSUSE Tumbleweed:strongswan-ipsec-5.9.0-1.9 openSUSE Tumbleweed:strongswan-libs0-5.9.0-1.9 openSUSE Tumbleweed:strongswan-mysql-5.9.0-1.9 openSUSE Tumbleweed:strongswan-nm-5.9.0-1.9 openSUSE Tumbleweed:strongswan-sqlite-5.9.0-1.9 SUSE Linux Enterprise Server 11 SP1 for Teradata:strongswan SUSE Linux Enterprise Server 11 SP3 for Teradata:strongswan SUSE Linux Enterprise Server 12 SP1-LTSS:strongswan SUSE Linux Enterprise Server 12 SP1-LTSS:strongswan-doc SUSE Linux Enterprise Server 12 SP1-LTSS:strongswan-hmac SUSE Linux Enterprise Server 12 SP1-LTSS:strongswan-ipsec SUSE Linux Enterprise Server 12 SP1-LTSS:strongswan-libs0 important 5 AV:N/AC:L/Au:N/C:N/I:N/A:P 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H