Summary
Jan Schermer discovered that strongSwan incorrectly validated client
certificates in certain configurations. A remote attacker could possibly
use this issue to bypass access controls.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | strongswan | 5.9.5-2ubuntu2.3 |
Vulnerabilities 1
-
High 7.7
strongSwan versions 5.9.2 through 5.9.5 are affected by authorization bypass through improper validation of certificate…
References
-
report
https://ubuntu.com/security/CVE-2022-4967