Buffer overflow in strongSwan - CVE-2018-17540

Vulnerability identifier: #VU15165

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-17540

CWE-ID: CWE-119

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform denial of service attacks.

The vulnerability exists due to a boundary error when processing certificates within gmp plugin. A remote attacker can create a specially crafted certificate, pass it to the affected application and trigger application crash.

strongSwan
Gentoo Linux
SUSE Linux Enterprise Debuginfo
SUSE Linux Enterprise Point of Sale
SUSE Linux Enterprise Server
Opensuse
strongswan (Alpine package)
strongswan (Debian package)
strongswan
strongswan-doc
strongswan-debuginfo
strongswan-debugsource

Install updates from vendor's website.

strongSwan - update to 5.7.1
strongswan (Alpine package) - update to 5.5.3-r3
strongswan (Debian package) - update to 5.5.1-4+deb9u4
strongswan - update to 4.4.0-6.36.12.1
strongswan-doc - update to 4.4.0-6.36.12.1
strongswan-debuginfo - update to 4.4.0-6.36.12.1
strongswan-debugsource - update to 4.4.0-6.36.12.1

• https://download.strongswan.org/security/CVE-2018-17540/
• https://lists.debian.org/debian-lts-announce/2018/10/msg00001.html
• https://usn.ubuntu.com/3774-1/
• https://www.debian.org/security/2018/dsa-4309
• https://www.strongswan.org/blog/2018/10/01/strongswan-vulnerability-(cve-2018-17540).html

• Denial of service in strongSwan
• Debian update for strongswan
• Gentoo update for strongSwan
• OpenSUSE Linux update for strongswan
• Buffer overflow in strongswan (Alpine package)
• SUSE update for strongswan