Executive Summary
| Summary | |
|---|---|
| Title | strongswan security update |
| Informations | |||
|---|---|---|---|
| Name | DSA-4309 | First vendor Publication | 2018-10-01 |
| Vendor | Debian | Last vendor Modification | 2018-10-01 |
| Severity (Vendor) | N/A | Revision | 1 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:L/Au:N/C:N/I:P/A:N) | |||
|---|---|---|---|
| Cvss Base Score | 5 | Attack Range | Network |
| Cvss Impact Score | 2.9 | Attack Complexity | Low |
| Cvss Expoit Score | 10 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| Google's OSS-Fuzz revealed an exploitable bug in the gmp plugin caused by the patch that fixes CVE-2018-16151 and CVE-2018-16151 (DSA-4305-1). An attacker could trigger it using crafted certificates with RSA keys with very small moduli. Verifying signatures with such keys would cause an integer underflow and subsequent heap buffer overflow resulting in a crash of the daemon. While arbitrary code execution is not completely ruled out because of the heap buffer overflow, due to the form of the data written to the buffer it seems difficult to actually exploit it in such a way. For the stable distribution (stretch), this problem has been fixed in version 5.5.1-4+deb9u4. We recommend that you upgrade your strongswan packages. For the detailed security status of strongswan please refer to its security tracker page at: https://security-tracker.debian.org/tracker/strongswan |
Original Source
| Url : http://www.debian.org/security/2018/dsa-4309 |
CWE : Common Weakness Enumeration
| % | Id | Name |
|---|---|---|
| 50 % | CWE-347 | Improper Verification of Cryptographic Signature |
| 50 % | CWE-119 | Failure to Constrain Operations within the Bounds of a Memory Buffer |
CPE : Common Platform Enumeration
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2019-01-03 | Name : The remote Fedora host is missing a security update. File : fedora_2018-61df554bb1.nasl - Type : ACT_GATHER_INFO |
| 2019-01-03 | Name : The remote Fedora host is missing a security update. File : fedora_2018-a0d22c2a21.nasl - Type : ACT_GATHER_INFO |
| 2018-11-27 | Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201811-16.nasl - Type : ACT_GATHER_INFO |
| 2018-10-16 | Name : The remote Fedora host is missing a security update. File : fedora_2018-9caa6528d2.nasl - Type : ACT_GATHER_INFO |
| 2018-10-03 | Name : The remote Debian host is missing a security update. File : debian_DLA-1528.nasl - Type : ACT_GATHER_INFO |
| 2018-10-03 | Name : The remote Debian host is missing a security-related update. File : debian_DSA-4309.nasl - Type : ACT_GATHER_INFO |
| 2018-09-27 | Name : The remote Debian host is missing a security update. File : debian_DLA-1522.nasl - Type : ACT_GATHER_INFO |
| 2018-09-25 | Name : The remote Debian host is missing a security-related update. File : debian_DSA-4305.nasl - Type : ACT_GATHER_INFO |
Alert History
| Date | Informations |
|---|---|
| 2018-12-19 21:21:59 |
|
| 2018-11-27 21:22:51 |
|
| 2018-10-04 00:21:42 |
|
| 2018-10-02 13:18:47 |
|
