[SECURITY] [DLA 1059-1] strongswan security update

2017-08-1814:54:34

lists.debian.org

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.007 Low

EPSS

Percentile

80.7%

JSON

Package : strongswan
Version : 4.5.2-1.5+deb7u10
CVE ID : CVE-2017-11185
Debian Bug : #872155

It was discovered that there was a denial-of-service vulnerability in
the Strongswan Virtual Private Network (VPN) software.

Specific RSA signatures passed to the gmp plugin for verification could
cause a null-pointer dereference. Potential triggers are signatures in
certificates, but also signatures used during IKE authentication.

For more details, please see:

<https://www.strongswan.org/blog/2017/08/14/strongswan-vulnerability-(cve-2017-11185).html>

For Debian 7 "Wheezy", this issue has been fixed in strongswan version
4.5.2-1.5+deb7u10.

We recommend that you upgrade your strongswan packages.

Regards,

  ,&#x27;&#x27;`.
 : :&#x27;  :     Chris Lamb
 `. `&#x27;`      [email protected] / chris-lamb.co.uk
   `-

OSVersionArchitecturePackageVersionFilename
Debian9armelstrongswan-libcharon< 5.5.1-4+deb9u1strongswan-libcharon_5.5.1-4+deb9u1_armel.deb
Debian9i386strongswan-pki< 5.5.1-4+deb9u1strongswan-pki_5.5.1-4+deb9u1_i386.deb
Debian8mipsellibstrongswan-standard-plugins< 5.2.1-6+deb8u5libstrongswan-standard-plugins_5.2.1-6+deb8u5_mipsel.deb
Debian9ppc64ellibstrongswan-dbgsym< 5.5.1-4+deb9u1libstrongswan-dbgsym_5.5.1-4+deb9u1_ppc64el.deb
Debian9ppc64elstrongswan-swanctl< 5.5.1-4+deb9u1strongswan-swanctl_5.5.1-4+deb9u1_ppc64el.deb
Debian9mips64elstrongswan-pki-dbgsym< 5.5.1-4+deb9u1strongswan-pki-dbgsym_5.5.1-4+deb9u1_mips64el.deb
Debian8powerpclibstrongswan-extra-plugins< 5.2.1-6+deb8u5libstrongswan-extra-plugins_5.2.1-6+deb8u5_powerpc.deb
Debian9ppc64elcharon-systemd< 5.5.1-4+deb9u1charon-systemd_5.5.1-4+deb9u1_ppc64el.deb
Debian8mipsellibstrongswan< 5.2.1-6+deb8u5libstrongswan_5.2.1-6+deb8u5_mipsel.deb
Debian8mipslibstrongswan-extra-plugins< 5.2.1-6+deb8u5libstrongswan-extra-plugins_5.2.1-6+deb8u5_mips.deb

OS	Version	Architecture	Package	Version	Filename
Debian	9	armel	strongswan-libcharon	< 5.5.1-4+deb9u1	strongswan-libcharon_5.5.1-4+deb9u1_armel.deb
Debian	9	i386	strongswan-pki	< 5.5.1-4+deb9u1	strongswan-pki_5.5.1-4+deb9u1_i386.deb
Debian	8	mipsel	libstrongswan-standard-plugins	< 5.2.1-6+deb8u5	libstrongswan-standard-plugins_5.2.1-6+deb8u5_mipsel.deb
Debian	9	ppc64el	libstrongswan-dbgsym	< 5.5.1-4+deb9u1	libstrongswan-dbgsym_5.5.1-4+deb9u1_ppc64el.deb
Debian	9	ppc64el	strongswan-swanctl	< 5.5.1-4+deb9u1	strongswan-swanctl_5.5.1-4+deb9u1_ppc64el.deb
Debian	9	mips64el	strongswan-pki-dbgsym	< 5.5.1-4+deb9u1	strongswan-pki-dbgsym_5.5.1-4+deb9u1_mips64el.deb
Debian	8	powerpc	libstrongswan-extra-plugins	< 5.2.1-6+deb8u5	libstrongswan-extra-plugins_5.2.1-6+deb8u5_powerpc.deb
Debian	9	ppc64el	charon-systemd	< 5.5.1-4+deb9u1	charon-systemd_5.5.1-4+deb9u1_ppc64el.deb
Debian	8	mipsel	libstrongswan	< 5.2.1-6+deb8u5	libstrongswan_5.2.1-6+deb8u5_mipsel.deb
Debian	8	mips	libstrongswan-extra-plugins	< 5.2.1-6+deb8u5	libstrongswan-extra-plugins_5.2.1-6+deb8u5_mips.deb