Integer overflow in strongSwan - CVE-2021-41990

Vulnerability identifier: #VU57554

CSH Severity: High

CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2021-41990

CWE-ID: CWE-190

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to integer overflow when processing a crafted certificate with an RSASSA-PSS signature. A remote attacker can pass specially crafted data to the application, trigger integer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

strongSwan
SUSE CaaS Platform
SUSE Enterprise Storage
Fedora
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Server
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Workstation Extension
Ubuntu
openEuler
Chrome OS
strongswan (Debian package)
SUSE Linux Enterprise Module for Packagehub Subpackages
strongswan (Ubuntu package)
libstrongswan (Ubuntu package)
strongswan-help
strongswan-debugsource
strongswan-debuginfo
strongswan
strongswan-libs0
strongswan-doc
strongswan-libs0-debuginfo
strongswan-ipsec-debuginfo
strongswan-ipsec
strongswan-hmac
strongswan-nm
strongswan-nm-debuginfo
PowerStore T

Install updates from vendor's website.

strongSwan - update to 5.9.4
strongswan (Debian package) - addressed in versions 5.7.2-1+deb10u1, 5.9.1-1+deb11u1
PowerStore T - update to 3.5.0.1-2083289
strongswan (Ubuntu package) - addressed in versions 5.6.2-1ubuntu2.7, 5.8.2-1ubuntu3.3, 5.9.1-1ubuntu1.2, 5.9.1-1ubuntu3.1
libstrongswan (Ubuntu package) - addressed in versions 5.6.2-1ubuntu2.7, 5.8.2-1ubuntu3.3, 5.9.1-1ubuntu1.2, 5.9.1-1ubuntu3.1
strongswan-help - update to 5.7.2-7
strongswan-debugsource - update to 5.7.2-7
strongswan-debuginfo - update to 5.7.2-7
strongswan - update to 5.7.2-7
strongswan-libs0 - addressed in versions 5.8.2-4.14.2, 5.8.2-11.21.1
strongswan-doc - addressed in versions 5.8.2-4.14.2, 5.8.2-11.21.1
strongswan-libs0-debuginfo - addressed in versions 5.8.2-4.14.2, 5.8.2-11.21.1
strongswan-ipsec-debuginfo - addressed in versions 5.8.2-4.14.2, 5.8.2-11.21.1
strongswan-ipsec - addressed in versions 5.8.2-4.14.2, 5.8.2-11.21.1
strongswan-hmac - addressed in versions 5.8.2-4.14.2, 5.8.2-11.21.1
strongswan-debuginfo - addressed in versions 5.8.2-4.14.2, 5.8.2-11.21.1
strongswan - addressed in versions 5.8.2-4.14.2, 5.8.2-11.21.1
strongswan-debugsource - addressed in versions 5.8.2-4.14.2, 5.8.2-11.21.1
strongswan-nm - update to 5.8.2-11.21.1
strongswan-nm-debuginfo - update to 5.8.2-11.21.1
strongswan - addressed in versions 5.9.4-1.el8, 5.9.4-1.fc33, 5.9.4-1.fc34, 5.9.4-1.fc35, 5.9.4-1.fc36
Chrome OS - update to 96.0.4664.180

• https://github.com/strongswan/strongswan/releases/tag/5.9.4
• https://www.strongswan.org/blog/2021/10/18/strongswan-vulnerability-(cve-2021-41990).html
• https://www.debian.org/security/2021/dsa-4989

• Multiple vulnerabilities in strongSwan
• Debian update for strongswan
• Multiple vulnerabilities in Google Chrome OS LTS
• SUSE update for strongswan
• SUSE update for strongswan
• Ubuntu update for strongswan
• Multiple vulnerabilities in Dell PowerStore Family
• openEuler update for strongswan
• Fedora 36 update for strongswan
• Fedora EPEL 8 update for strongswan
• Fedora 35 update for strongswan
• Fedora 33 update for strongswan
• Fedora 34 update for strongswan