strongSwan gmp Plugin Denial of Service (CVE-2017-11185)

A denial-of-service vulnerability exists in strongSwan. The vulnerability is due to insufficient validation of RSA signature values before their use within the gmp plugin. A remote attacker could exploit this vulnerability by sending a crafted message to the target server...

Code injection

strongSwan 5.2.2 and 5.3.0 allows remote attackers to cause a denial of service daemon crash or execute arbitrary code...

CVE-2015-3991

strongSwan 5.2.2 and 5.3.0 allows remote attackers to cause a denial of service daemon crash or execute arbitrary code...

CVE-2015-3991

strongSwan 5.2.2 and 5.3.0 allows remote attackers to cause a denial of service daemon crash or execute arbitrary code...

DEBIAN-CVE-2015-3991

strongSwan 5.2.2 and 5.3.0 allows remote attackers to cause a denial of service daemon crash or execute arbitrary code...

CVE-2015-3991

CVE-2015-3991 affects strongSwan versions 5.2.2 and 5.3.0, enabling a remote attacker to cause a daemon crash (DoS) or execute arbitrary code. Public references across OSV, NVD, Debian/CVEs corroborate the issue. Fedora advisory notes a later update (5.3.2) fixes this CVE; other entries (openSUSE...

CVE-2015-3991

strongSwan 5.2.2 and 5.3.0 allows remote attackers to cause a denial of service daemon crash or execute arbitrary code...

CVE-2015-3991

strongSwan 5.2.2 and 5.3.0 allows remote attackers to cause a denial of service daemon crash or execute arbitrary code...

Debian DSA-3962-1 : strongswan - security update

A denial of service vulnerability was identified in strongSwan, an IKE/IPsec suite, using Google's OSS-Fuzz fuzzing project. The gmp plugin in strongSwan had insufficient input validation when verifying RSA signatures. This coding error could lead to a NULL pointer dereference, leading to process...

[SECURITY] [DSA 3962-1] strongswan security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3962-1 [email protected] https://www.debian.org/security/ Yves-Alexis Perez September 03, 2017 https://www.debian.org/security/faq -...

DSA-3962-1 strongswan - security update

Bulletin has no description...

Debian: Security Advisory (DSA-3962-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES11 Security Update : strongswan (SUSE-SU-2017:2293-1)

This update for strongswan fixes the following issues : - CVE-2017-11185: Specific RSA signatures passed to the gmp plugin for verification can cause a NULL pointer dereference and it may lead to a denial of service bsc1051222 Note that Tenable Network Security has extracted the preceding...

SUSE-SU-2017:2293-1 Security update for strongswan

This update for strongswan fixes the following issues: - CVE-2017-11185: Specific RSA signatures passed to the gmp plugin for verification can cause a null-pointer dereference and it may lead to a denial of service bsc1051222...

CVE-2017-11185

The gmp plugin in strongSwan before 5.6.0 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted RSA signature...

Ubuntu 14.04 LTS / 16.04 LTS : strongSwan vulnerability (USN-3397-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3397-1 advisory. It was discovered that strongSwan incorrectly handled verifying specific RSA signatures. A remote attacker could use this issue to cause strongSwan to...

USN-3397-1: strongSwan vulnerability

It was discovered that strongSwan incorrectly handled verifying specific RSA signatures. A remote attacker could use this issue to cause strongSwan to crash, resulting in a denial of service...

USN-3397-1 strongswan vulnerability

It was discovered that strongSwan incorrectly handled verifying specific RSA signatures. A remote attacker could use this issue to cause strongSwan to crash, resulting in a denial of service...

strongSwan Denial of Service Vulnerability

strongSwan is an open source IPsec-based VPN solution for Linux maintained by Swiss software developer Andreas Steffen. The solution includes X.509 public key certificates, secure storage of private keys, smart cards and other authentication mechanisms. gmp plugin is one of the plug-ins. The gmp...

Debian DLA-1059-1 : strongswan security update

It was discovered that there was a denial of service vulnerability in the Strongswan Virtual Private Network VPN software. Specific RSA signatures passed to the gmp plugin for verification could cause a NULL pointer dereference. Potential triggers are signatures in certificates, but also signatur...