Summary
Florian Picca discovered that strongSwan incorrectly handled certain DH
public values. A remote attacker could use this issue to cause strongSwan
to crash, resulting in a denial of service, or possibly execute arbitrary
code.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | strongswan | 5.8.2-1ubuntu3.6 |
| Ubuntu · 22.04 LTS 22.04:LTS | strongswan | 5.9.5-2ubuntu2.2 |
Vulnerabilities 1
-
Critical 9.8
strongSwan before 5.9.12 has a buffer overflow and possible unauthenticated remote code execution via a DH public value…
References
-
report
https://ubuntu.com/security/CVE-2023-41913