Lucene search
K

strongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation plugin by sending a crafted end-entity (and intermediate CA) certificate that contains a CRL/OCSP URL that points to a server (under the attacker's control) that doesn't properly respond but (for example) just does nothing after the initial TCP handshake or sends an excessive amount of application data.

🗓️ 09 Nov 2022 08:00:00Reported by MicrosoftType 
mscve
 mscve
🔗 msrc.microsoft.com👁 1 Views

StrongSwan before 5.9.8 enables remote denial of service via crafted certificate using certificate revocation list and online certificate status

Related
Detection
ReporterTitlePublishedViews
Family
FreeBSD
strongswan -- DOS attack vulnerability
3 Oct 202200:00
freebsd
AlpineLinux
CVE-2022-40617
31 Oct 202200:00
alpinelinux
AstraLinux
Astra Linux - уязвимость в strongswan
3 May 202623:59
astralinux
CBLMariner
CVE-2022-40617 affecting package strongswan for versions less than 5.9.8-1
3 Jan 202320:57
cbl_mariner
CBLMariner
CVE-2022-40617 affecting package strongswan 5.7.2-5
2 Mar 202304:18
cbl_mariner
CNNVD
strongSwan 资源管理错误漏洞
4 Oct 202200:00
cnnvd
CNVD
strongSwan trust management issue vulnerability
11 Oct 202200:00
cnvd
CVE
CVE-2022-40617
31 Oct 202200:00
cve
Cvelist
CVE-2022-40617
31 Oct 202200:00
cvelist
Debian
[SECURITY] [DLA 3143-1] strongswan security update
10 Oct 202220:00
debian
Rows per page
Vulners

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

09 Nov 2022 08:00Current
7.7High risk
Vulners AI Score7.7
CVSS 3.17.5
EPSS0.00222
SSVC
1