[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

244625

 
 

909

 
 

193379

 
 

277

Paid content will be excluded from the download.


Download | Alert*
OVAL

DSA-4309-1 strongswan -- strongswan

ID: oval:org.secpod.oval:def:603537Date: (C)2018-10-04   (M)2023-12-20
Class: PATCHFamily: unix




Google"s OSS-Fuzz revealed an exploitable bug in the gmp plugin caused by the patch that fixes CVE-2018-16151 and CVE-2018-16151 . An attacker could trigger it using crafted certificates with RSA keys with very small moduli. Verifying signatures with such keys would cause an integer underflow and subsequent heap buffer overflow resulting in a crash of the daemon. While arbitrary code execution is not completely ruled out because of the heap buffer overflow, due to the form of the data written to the buffer it seems difficult to actually exploit it in such a way.

Platform:
Debian 9.x
Product:
libcharon-extra-plugins
libstrongswan
charon-systemd
strongswan
charon-cmd
Reference:
DSA-4309-1
CVE-2018-17540
CVE    1
CVE-2018-17540
CPE    128
cpe:/a:strongswan:strongswan:4.3.6
cpe:/o:debian:debian_linux:9.0
cpe:/a:strongswan:strongswan:4.3.5
cpe:/a:strongswan:strongswan:4.3.4
...

© SecPod Technologies