The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate with an RSASSA-PSS signature. For example this can be triggered by an unrelated self-signed CA certificate sent by an initiator. Remote code execution cannot occur.

🗓️ 22 Oct 2021 07:00:00Reported by MicrosoftType

GMP plugin in strongSwan before 5.9.4 is vulnerable to remote integer overflow via RSASSA-PSS certificates.

Reporter	Title	Published	Views	Family All 64
FreeBSD	strongswan - denial-of-service vulnerability in the gmp plugin/denial-of-service vulnerability in the in-memory certificate cache	4 Oct 202100:00	–	freebsd
attackerkb	CVE-2021-41990	18 Oct 202114:15	–	attackerkb
AlpineLinux	CVE-2021-41990	18 Oct 202113:44	–	alpinelinux
CBLMariner	CVE-2021-41990 affecting package strongswan 5.7.2-6	6 Nov 202100:29	–	cbl_mariner
CBLMariner	CVE-2021-41990 affecting package strongswan for versions less than 5.9.5-1	26 Apr 202220:17	–	cbl_mariner
Tenable Nessus	Rocky Linux 8.6 [CIQ] Security Update: perl-vici / python3-vici / strongswan / strongswan-charon-nm / etc Multiple Vulnerabilities (ciqsa-2026_1607)	12 Oct 202600:00	–	nessus
Tenable Nessus	Debian DSA-4989-1 : strongswan - security update	19 Oct 202100:00	–	nessus
Tenable Nessus	FreeBSD : strongswan - denial-of-service vulnerability in the gmp plugin/denial-of-service vulnerability in the in-memory certificate cache (58528a94-5100-4208-a04d-edc01598cf01)	30 Jan 202200:00	–	nessus
Tenable Nessus	openSUSE 15 Security Update : strongswan (openSUSE-SU-2021:1399-1)	1 Nov 202100:00	–	nessus
Tenable Nessus	openSUSE 15 Security Update : strongswan (openSUSE-SU-2021:3467-1)	20 Oct 202100:00	–	nessus