Summary
USN-6488-1 fixed a vulnerability in strongSwan. This update provides
the corresponding updates for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS.
Original advisory details:
Florian Picca discovered that strongSwan incorrectly handled certain DH
public values. A remote attacker could use this issue to cause strongSwan
to crash, resulting in a denial of service, or possibly execute arbitrary
code.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | strongswan | 5.3.5-1ubuntu3.8+esm4 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | strongswan | 5.6.2-1ubuntu2.9+esm1 |
Vulnerabilities 1
-
Critical 9.8
strongSwan before 5.9.12 has a buffer overflow and possible unauthenticated remote code execution via a DH public value…
References
-
report
https://ubuntu.com/security/CVE-2023-41913