strongSwan vulnerability

2022-01-2400:00:00

ubuntu.com

9.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.1%

JSON

Releases

Ubuntu 21.10
Ubuntu 20.04 LTS
Ubuntu 18.04 ESM

Packages

strongswan - IPsec VPN solution

Details

Zhuowei Zhang discovered that stringSwan incorrectly handled EAP
authentication. A remote attacker could use this issue to cause strongSwan
to crash, resulting in a denial of service, or possibly bypass client and
server authentication.

OSVersionArchitecturePackageVersionFilename
Ubuntu21.10noarchlibstrongswan< 5.9.1-1ubuntu3.2UNKNOWN
Ubuntu21.10noarchcharon-cmd< 5.9.1-1ubuntu3.2UNKNOWN
Ubuntu21.10noarchcharon-cmd-dbgsym< 5.9.1-1ubuntu3.2UNKNOWN
Ubuntu21.10noarchcharon-systemd< 5.9.1-1ubuntu3.2UNKNOWN
Ubuntu21.10noarchcharon-systemd-dbgsym< 5.9.1-1ubuntu3.2UNKNOWN
Ubuntu21.10noarchlibcharon-extauth-plugins< 5.9.1-1ubuntu3.2UNKNOWN
Ubuntu21.10noarchlibcharon-extauth-plugins-dbgsym< 5.9.1-1ubuntu3.2UNKNOWN
Ubuntu21.10noarchlibcharon-extra-plugins< 5.9.1-1ubuntu3.2UNKNOWN
Ubuntu21.10noarchlibcharon-extra-plugins-dbgsym< 5.9.1-1ubuntu3.2UNKNOWN
Ubuntu21.10noarchlibstrongswan-dbgsym< 5.9.1-1ubuntu3.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	21.10	noarch	libstrongswan	< 5.9.1-1ubuntu3.2	UNKNOWN
Ubuntu	21.10	noarch	charon-cmd	< 5.9.1-1ubuntu3.2	UNKNOWN
Ubuntu	21.10	noarch	charon-cmd-dbgsym	< 5.9.1-1ubuntu3.2	UNKNOWN
Ubuntu	21.10	noarch	charon-systemd	< 5.9.1-1ubuntu3.2	UNKNOWN
Ubuntu	21.10	noarch	charon-systemd-dbgsym	< 5.9.1-1ubuntu3.2	UNKNOWN
Ubuntu	21.10	noarch	libcharon-extauth-plugins	< 5.9.1-1ubuntu3.2	UNKNOWN
Ubuntu	21.10	noarch	libcharon-extauth-plugins-dbgsym	< 5.9.1-1ubuntu3.2	UNKNOWN
Ubuntu	21.10	noarch	libcharon-extra-plugins	< 5.9.1-1ubuntu3.2	UNKNOWN
Ubuntu	21.10	noarch	libcharon-extra-plugins-dbgsym	< 5.9.1-1ubuntu3.2	UNKNOWN
Ubuntu	21.10	noarch	libstrongswan-dbgsym	< 5.9.1-1ubuntu3.2	UNKNOWN