Summary
It was discovered that strongSwan incorrectly handled signature validation
in the gmp plugin. A remote attacker could use this issue to cause
strongSwan to crash, resulting in a denial of service, or possibly execute
arbitrary code.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | strongswan | 5.1.2-0ubuntu2.11 |
| Ubuntu · 16.04 LTS 16.04:LTS | strongswan | 5.3.5-1ubuntu3.8 |
| Ubuntu · 18.04 LTS 18.04:LTS | strongswan | 5.6.2-1ubuntu2.3 |
Vulnerabilities 1
-
Unscored —
The gmp plugin in strongSwan before 5.7.1 has a Buffer Overflow via a crafted certificate.
References
-
report
https://ubuntu.com/security/CVE-2018-17540