Lucene search
UbuntuUSN-6772-1HistoryMay 14, 2024 - 12:00 a.m.
strongSwan vulnerability
2024-05-1400:00:00
ubuntu.com
10
strongswan
ipsec vpn solution
access controls
ubuntu 22.04
CVSS3
7.7
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
AI Score
7.8
Confidence
High
EPSS
0
Percentile
15.5%
Releases
- Ubuntu 22.04 LTS
Packages
- strongswan - IPsec VPN solution
Details
Jan Schermer discovered that strongSwan incorrectly validated client
certificates in certain configurations. A remote attacker could possibly
use this issue to bypass access controls.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 22.04 | noarch | libstrongswan | < 5.9.5-2ubuntu2.3 | UNKNOWN |
| Ubuntu | 22.04 | noarch | charon-cmd | < 5.9.5-2ubuntu2.3 | UNKNOWN |
| Ubuntu | 22.04 | noarch | charon-cmd-dbgsym | < 5.9.5-2ubuntu2.3 | UNKNOWN |
| Ubuntu | 22.04 | noarch | charon-systemd | < 5.9.5-2ubuntu2.3 | UNKNOWN |
| Ubuntu | 22.04 | noarch | charon-systemd-dbgsym | < 5.9.5-2ubuntu2.3 | UNKNOWN |
| Ubuntu | 22.04 | noarch | libcharon-extauth-plugins | < 5.9.5-2ubuntu2.3 | UNKNOWN |
| Ubuntu | 22.04 | noarch | libcharon-extauth-plugins-dbgsym | < 5.9.5-2ubuntu2.3 | UNKNOWN |
| Ubuntu | 22.04 | noarch | libcharon-extra-plugins | < 5.9.5-2ubuntu2.3 | UNKNOWN |
| Ubuntu | 22.04 | noarch | libcharon-extra-plugins-dbgsym | < 5.9.5-2ubuntu2.3 | UNKNOWN |
| Ubuntu | 22.04 | noarch | libstrongswan-dbgsym | < 5.9.5-2ubuntu2.3 | UNKNOWN |
References
Related
openvas
openvas
strongSwan 5.9.2 < 5.9.6 Authorization Bypass Vulnerability
2024-05-15 00:00:00
Ubuntu: Security Advisory (USN-6772-1)
2024-05-15 00:00:00
debiancve
debiancve
CVE-2022-4967
2024-05-14 11:57:00
nessus
nessus
Ubuntu 22.04 LTS : strongSwan vulnerability (USN-6772-1)
2024-05-14 00:00:00
osv
osv
CVE-2022-4967
2024-05-14 11:57:00
strongswan vulnerability
2024-05-14 11:20:27
cve
cve
CVE-2022-4967
2024-05-14 11:57:00
ubuntucve
ubuntucve
CVE-2022-4967
2024-05-13 00:00:00
nvd
nvd
CVE-2022-4967
2024-05-14 11:57:00
alpinelinux
alpinelinux
CVE-2022-4967
2024-05-14 11:57:00
cvelist
cvelist
CVE-2022-4967
2024-05-13 12:09:19
vulnrichment
vulnrichment
CVE-2022-4967
2024-05-13 12:09:19
CVSS3
7.7
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
AI Score
7.8
Confidence
High
EPSS
0
Percentile
15.5%
Related for USN-6772-1