DEBIAN-CVE-2017-11185

The gmp plugin in strongSwan before 5.6.0 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted RSA signature...

CVE-2017-11185

The gmp plugin in strongSwan before 5.6.0 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted RSA signature...

CVE-2017-11185

The gmp plugin in strongSwan before 5.6.0 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted RSA signature...

ALPINE-CVE-2017-11185

The gmp plugin in strongSwan before 5.6.0 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted RSA signature...

Null pointer dereference

The gmp plugin in strongSwan before 5.6.0 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted RSA signature...

CVE-2017-11185

CVE-2017-11185 affects strongSwan’s gmp plugin prior to version 5.6.0. An attacker can send specially crafted RSA signatures to trigger a NULL pointer dereference, causing the strongSwan daemon to crash (DoS). The available connected sources confirm the vulnerability is due to insufficient valida...

CVE-2017-11185

The gmp plugin in strongSwan before 5.6.0 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted RSA signature...

CVE-2017-11185

The gmp plugin in strongSwan before 5.6.0 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted RSA signature...

CVE-2017-11185

The gmp plugin in strongSwan before 5.6.0 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted RSA signature...

CVE-2017-11185

The gmp plugin in strongSwan before 5.6.0 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted RSA signature...

[SECURITY] [DLA 1059-1] strongswan security update

Package : strongswan Version : 4.5.2-1.5+deb7u10 CVE ID : CVE-2017-11185 Debian Bug : 872155 It was discovered that there was a denial-of-service vulnerability in the Strongswan Virtual Private Network VPN software. Specific RSA signatures passed to the gmp plugin for verification could cause a...

DLA-1059-1 strongswan - security update

Bulletin has no description...

CVE-2017-11185

The gmp plugin in strongSwan before 5.6.0 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted RSA signature...

UBUNTU-CVE-2017-11185

The gmp plugin in strongSwan before 5.6.0 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted RSA signature...

strongswan: Index-out-of-bounds in calc_netbits

Project: https://github.com/strongswan/strongswan.git Detailed report: https://oss-fuzz.com/testcase?key=5401543119470592 Project: strongswan Fuzzer: libFuzzerstrongswanfuzzcerts Fuzz target binary: fuzzcerts Job Type: libfuzzerubsanstrongswan Platform Id: linux Crash Type: Index-out-of-bounds...

strongswan: Index-out-of-bounds in traffic_selector_create_from_rfcNUMBER_format

Project: https://github.com/strongswan/strongswan.git Detailed report: https://oss-fuzz.com/testcase?key=6094496901103616 Project: strongswan Fuzzer: libFuzzerstrongswanfuzzcerts Fuzz target binary: fuzzcerts Job Type: libfuzzerubsanstrongswan Platform Id: linux Crash Type: Index-out-of-bounds...

SUSE SLED12 / SLES12 Security Update : strongswan (SUSE-SU-2017:2143-1)

This update for strongswan fixes the following issues : - CVE-2017-11185: Specific RSA signatures passed to the gmp plugin for verification can cause a NULL pointer dereference and it may lead to a denial of service bsc1051222 Note that Tenable Network Security has extracted the preceding...

[ASA-201708-13] strongswan: denial of service

Arch Linux Security Advisory ASA-201708-13 ========================================== Severity: Low Date : 2017-08-14 CVE-ID : CVE-2017-11185 Package : strongswan Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-382 Summary ======= The package strongswan before...

SUSE-SU-2017:2143-1 Security update for strongswan

This update for strongswan fixes the following issues: CVE-2017-11185: Specific RSA signatures passed to the gmp plugin for verification can cause a null-pointer dereference and it may lead to a denial of service bsc1051222...

FreeBSD : strongswan -- Denial-of-service vulnerability in the x509 plugin (c7e8e955-6c61-11e7-9b01-2047478f2f70)

strongSwan security team reports : ASN.1 CHOICE types are not correctly handled by the ASN.1 parser when parsing X.509 certificates with extensions that use such types. This could lead to infinite looping of the thread parsing a specifically crafted certificate. %NASLMINLEVEL 70300 C Tenable...