CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
Confidence
High
EPSS
Percentile
84.3%
Debian Security Advisory DSA-4309-1 [email protected]
https://www.debian.org/security/ Yves-Alexis Perez
October 01, 2018 https://www.debian.org/security/faq
Package : strongswan
CVE ID : CVE-2018-17540
Google's OSS-Fuzz revealed an exploitable bug in the gmp plugin caused by the
patch that fixes CVE-2018-16151 and CVE-2018-16151 (DSA-4305-1).
An attacker could trigger it using crafted certificates with RSA keys with
very small moduli. Verifying signatures with such keys would cause an integer
underflow and subsequent heap buffer overflow resulting in a crash of the
daemon. While arbitrary code execution is not completely ruled out because of
the heap buffer overflow, due to the form of the data written to the buffer
it seems difficult to actually exploit it in such a way.
For the stable distribution (stretch), this problem has been fixed in
version 5.5.1-4+deb9u4.
We recommend that you upgrade your strongswan packages.
For the detailed security status of strongswan please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/strongswan
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/
Mailing list: [email protected]
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Debian | 9 | s390x | libcharon-extra-plugins-dbgsym | < 5.5.1-4+deb9u4 | libcharon-extra-plugins-dbgsym_5.5.1-4+deb9u4_s390x.deb |
Debian | 9 | mipsel | libstrongswan-extra-plugins | < 5.5.1-4+deb9u4 | libstrongswan-extra-plugins_5.5.1-4+deb9u4_mipsel.deb |
Debian | 9 | mipsel | strongswan-swanctl | < 5.5.1-4+deb9u4 | strongswan-swanctl_5.5.1-4+deb9u4_mipsel.deb |
Debian | 9 | s390x | strongswan-pki-dbgsym | < 5.5.1-4+deb9u4 | strongswan-pki-dbgsym_5.5.1-4+deb9u4_s390x.deb |
Debian | 8 | armhf | strongswan-dbg | < 5.2.1-6+deb8u8 | strongswan-dbg_5.2.1-6+deb8u8_armhf.deb |
Debian | 9 | mipsel | charon-cmd | < 5.5.1-4+deb9u4 | charon-cmd_5.5.1-4+deb9u4_mipsel.deb |
Debian | 9 | mips64el | strongswan-libcharon | < 5.5.1-4+deb9u4 | strongswan-libcharon_5.5.1-4+deb9u4_mips64el.deb |
Debian | 9 | amd64 | charon-systemd | < 5.5.1-4+deb9u4 | charon-systemd_5.5.1-4+deb9u4_amd64.deb |
Debian | 8 | i386 | strongswan-nm | < 5.2.1-6+deb8u8 | strongswan-nm_5.2.1-6+deb8u8_i386.deb |
Debian | 8 | amd64 | strongswan-starter | < 5.2.1-6+deb8u8 | strongswan-starter_5.2.1-6+deb8u8_amd64.deb |
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
Confidence
High
EPSS
Percentile
84.3%