Summary
It was discovered that strongSwan incorrectly handled verifying
specific RSA signatures. A remote attacker could use this issue
to cause strongSwan to crash, resulting in a denial of service.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | strongswan | 5.1.2-0ubuntu2.7 |
| Ubuntu · 16.04 LTS 16.04:LTS | strongswan | 5.3.5-1ubuntu3.4 |
Vulnerabilities 1
-
High 7.5
The gmp plugin in strongSwan before 5.6.0 allows remote attackers to cause a denial of service (NULL pointer dereferenc…
References
-
report
https://ubuntu.com/security/CVE-2017-11185