BSA-2017-348

🗓️ 23 Jun 2017 00:00:00Reported by Broadcom Security ResponseType

DoS in StrongSwan x509 plugin from ASN.1 CHOICE parsing causing infinite loop; affected up to version 5.5.2.

Reporter	Title	Published	Views	Family All 59
IBM Security Bulletins	Security Bulletin: Vulnerabilities in strongSwan affect IBM Chassis Management Module (CVE-2017-9022, CVE-2017-9023)	31 Jan 201902:25	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in strongswan affect IBM Integrated Management Module II (IMM2) for System x, Flex and BladeCenter Systems	14 Apr 202314:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in strongswan affect IBM Flex System Manager (FSM) (CVE-2017-9023, CVE-2017-9022)	18 Jun 201801:38	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in strongswan affect IBM BladeCenter Advanced Management Module (AMM) (CVE-2017-9023, CVE-2017-9022)	14 Apr 202314:32	–	ibm
AlpineLinux	CVE-2017-9023	8 Jun 201716:00	–	alpinelinux
FreeBSD	strongswan -- Denial-of-service vulnerability in the x509 plugin	30 May 201700:00	–	freebsd
FreeBSD	strongswan -- multiple vulnerabilities	30 May 201700:00	–	freebsd
CNVD	strongSwan ASN.1 Parser Denial of Service Vulnerability	31 May 201700:00	–	cnvd
Check Point Advisories	strongSwan x509 Plugin Denial of Service (CVE-2017-9023)	17 Jul 201700:00	–	checkpoint_advisories
CVE	CVE-2017-9023	8 Jun 201716:00	–	cve

08 Sep 2017 18:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS 24.3

CVSS 37.5

CVSS 3.17.5

EPSS0.02101

SSVC