CVE-2017-9023

🗓️ 08 Jun 2017 16:00:00Reported by Debian Security Bug TrackerType

ASN.1 parser in strongSwan allows remote attackers to cause denial of service via crafted certificat

Reporter	Title	Published	Views	Family All 59
IBM Security Bulletins	Security Bulletin: Vulnerabilities in strongSwan affect IBM Chassis Management Module (CVE-2017-9022, CVE-2017-9023)	31 Jan 201902:25	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in strongswan affect IBM Integrated Management Module II (IMM2) for System x, Flex and BladeCenter Systems	14 Apr 202314:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in strongswan affect IBM Flex System Manager (FSM) (CVE-2017-9023, CVE-2017-9022)	18 Jun 201801:38	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in strongswan affect IBM BladeCenter Advanced Management Module (AMM) (CVE-2017-9023, CVE-2017-9022)	14 Apr 202314:32	–	ibm
AlpineLinux	CVE-2017-9023	8 Jun 201716:00	–	alpinelinux
Broadcom	BSA-2017-348	23 Jun 201700:00	–	broadcom
FreeBSD	strongswan -- Denial-of-service vulnerability in the x509 plugin	30 May 201700:00	–	freebsd
FreeBSD	strongswan -- multiple vulnerabilities	30 May 201700:00	–	freebsd
CNVD	strongSwan ASN.1 Parser Denial of Service Vulnerability	31 May 201700:00	–	cnvd
Check Point Advisories	strongSwan x509 Plugin Denial of Service (CVE-2017-9023)	17 Jul 201700:00	–	checkpoint_advisories

OS	OS Version	Architecture	Package	Package Version	Filename
Debian	11	all	strongswan	5.5.1-4	strongswan_5.5.1-4_all.deb
Debian	12	all	strongswan	5.5.1-4	strongswan_5.5.1-4_all.deb
Debian	13	all	strongswan	5.5.1-4	strongswan_5.5.1-4_all.deb
Debian	14	all	strongswan	5.5.1-4	strongswan_5.5.1-4_all.deb
Debian	999	all	strongswan	5.5.1-4	strongswan_5.5.1-4_all.deb

08 Jun 2017 16:00Current

7.3High risk

Vulners AI Score7.3

CVSS 24.3

CVSS 37.5

CVSS 3.17.5

EPSS0.02222

SSVC