CVE-2018-16149

In sig_verify() in x509.c in axTLS version 2.1.3 and before, the PKCS#1 v1.5 signature verification blindly trusts the declared lengths in the ASN.1 structure

published November 7, 2018

CVSS
—
EPSS
1%
Percentile
52.2
In the wild
Unconfirmed
What it is

In sig_verify() in x509.c in axTLS version 2.1.3 and before, the PKCS#1 v1.5 signature verification blindly trusts the declared lengths in the ASN.1 structure. Consequently, when small public exponents are being used, a remote attacker can generate purposefully crafted signatures (and put them on X.509 certificates) to induce illegal memory access and crash the verifier.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00696 · 52.2th percentile
Published
2018-11-07T20:00Z
EPSS history
Timeline
  • 07 NOV 20:00Z
    In sig_verify() in x509.c in axTLS version 2.1.3 and before, the PKCS#1 v1.5 signature verification blindly trusts the declared lengths in the ASN.1 structure
    cvelistv5