strongSwan -- vulnerability in charon-tkm

strongSwan reports: A vulnerability in charon-tkm related to processing DH public values was discovered in strongSwan that can result in a buffer overflow and potentially remote code execution. All versions since 5.3.0 are affected...

PT-2023-7101 · Unknown +6 · Strongswan +6

Name of the Vulnerable Software and Affected Versions: strongSwan versions 5.3.0 through 5.9.11 Description: The issue is caused by a buffer overflow in the charon-tkm process with IKE protocol implementation based on TKMv2, leading to possible unauthenticated remote code execution via a DH publi...

DSA-5560-1 strongswan - security update

Bulletin has no description...

Ubuntu 20.04 LTS / 22.04 LTS / 23.04 / 23.10 : strongSwan vulnerability (USN-6488-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.04 / 23.10 host has packages installed that are affected by a vulnerability as referenced in the USN-6488-1 advisory. Florian Picca discovered that strongSwan incorrectly handled certain DH public values. A remote attacker could use this issue to cause...

Advisory ROSA-SA-2023-2274

software: strongswan 5.9.10 OS: ROSA-CHROME packageevrstring: strongswan-5.9.10-1.src.rpm CVE-ID: CVE-2021-41990 BDU-ID: 2022-04051 CVE-Crit: HIGH CVE-DESC.: The gmp plugin in StrongSwan prior to version 5.9.4 has a remote integer overflow via a generated RSASSA-PSS signed certificate. For exampl...

Siemens SIMATIC NET CP, SINEMA & SCALANCE Integer Overflow (CVE-2021-41990)

Siemens SIMATIC NET CP, SINEMA and SCALANCE Products Affected by Vulnerabilities in Third-Party Component strongSwan. The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate with an RSASSA-PSS signature. For example, this can be triggered by an unrelated...

CVE-2023-26463 affecting package strongswan for versions less than 5.9.10-1

CVE-2023-26463 affecting package strongswan for versions less than 5.9.10-1. An upgraded version of the package is available that resolves this issue...

The vulnerability of strongSwan, caused by a full overflow of integers (assuming that the cache of certificates in memory is full), allows a malicious actor to trigger a service failure.

The vulnerability of strongSwan is caused by a numerical overflow condition assuming that the cache of certificates in memory is full. Exploiting this vulnerability can allow an attacker who operates remotely to cause a service failure...

Critical Photon OS Security Update - PHSA-2023-5.0-91-0010

Updates of 'emacs', 'apr', 'strongswan', 'containerd', 'libksba', 'libtar' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2023-5.0-0010

Updates of 'containerd', 'emacs', 'strongswan', 'libtar', 'libksba', 'apr' packages of Photon OS have been released...

strongSwan 5.9.8 and 5.9.9 potentially allows remote code execution because it uses a variable named "public" for two different purposes within the same function. There is initially incorrect access control later followed by an expired pointer dereference. One attack vector is sending an untrusted client certificate during EAP-TLS. A server is affected only if it loads plugins that implement TLS-based EAP methods (EAP-TLS EAP-TTLS EAP-PEAP or EAP-TNC). This is fixed in 5.9.10.

...

The vulnerability of strongSwan demon, related to errors in certificate verification in EAP methods based on TLS, allows a perpetrator to perform a denial-of-service attack.

The vulnerability of strongSwan is related to errors in certificate verification during EAP methods based on TLS. Exploiting this vulnerability allows a remote attacker to perform a denial-of-service attack...

CVE-2023-26463

strongSwan 5.9.8 and 5.9.9 potentially allows remote code execution because it uses a variable named "public" for two different purposes within the same function. There is initially incorrect access control, later followed by an expired pointer dereference. One attack vector is sending an untrust...

DEBIAN-CVE-2023-26463

strongSwan 5.9.8 and 5.9.9 potentially allows remote code execution because it uses a variable named "public" for two different purposes within the same function. There is initially incorrect access control, later followed by an expired pointer dereference. One attack vector is sending an untrust...

ALPINE-CVE-2023-26463

strongSwan 5.9.8 and 5.9.9 potentially allows remote code execution because it uses a variable named "public" for two different purposes within the same function. There is initially incorrect access control, later followed by an expired pointer dereference. One attack vector is sending an untrust...

AZL-26300 CVE-2023-26463 affecting package strongswan for versions less than 5.9.10-1

strongSwan 5.9.8 and 5.9.9 potentially allows remote code execution because it uses a variable named "public" for two different purposes within the same function. There is initially incorrect access control, later followed by an expired pointer dereference. One attack vector is sending an untrust...

Null pointer dereference

strongSwan 5.9.8 and 5.9.9 potentially allows remote code execution because it uses a variable named "public" for two different purposes within the same function. There is initially incorrect access control, later followed by an expired pointer dereference. One attack vector is sending an untrust...

strongSwan 信任管理问题漏洞

strongSwan is a Swiss Andreas Steffen personal developer of a Linux platform to use the open source IPsec-based VPN solution. The solution includes authentication mechanisms such as X.509 public key certificates, securely stored private keys, and smart cards. A security vulnerability exists in...

Security Bulletin: Vulnerabilities in strongswan affect IBM BladeCenter Advanced Management Module (AMM) (CVE-2017-9023, CVE-2017-9022)

Summary IBM BladeCenter Advanced Management Module AMM has addressed the following vulnerabilities in strongswan. Vulnerability Details Summary IBM BladeCenter Advanced Management Module AMM has addressed the following vulnerabilities in strongswan. Vulnerability Details CVEID: CVE-2017-9023...

Security Bulletin: Vulnerabilities in strongswan affect IBM Integrated Management Module II (IMM2) for System x, Flex and BladeCenter Systems

Summary IBM Integrated Management Module II IMM2 for System x, Flex and BladeCenter Systems has addressed the following vulnerabilities in strongswan. Vulnerability Details Summary IBM Integrated Management Module II IMM2 for System x, Flex and BladeCenter Systems has addressed the following...