CVE-2017-11185

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2017-11185

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-11185.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2017-11185

Related

Published

2017-08-18T17:29:01Z

Modified

2024-09-18T02:41:30.767980Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

[none]

Details

The gmp plugin in strongSwan before 5.6.0 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted RSA signature.

References

Affected packages

Alpine:v3.3 / strongswan

Package

Name: strongswan
Purl: pkg:apk/alpine/strongswan?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.3.5-r4

Affected versions

4.*

4.5.2-r0

4.6.1-r0

5.*

5.1.1-r0

5.1.1-r1

5.1.1-r2

5.1.1-r3

5.1.3-r0

5.2.0-r0

5.2.0-r1

5.2.0-r2

5.2.2-r0

5.3.0-r0

5.3.0-r1

5.3.0-r2

5.3.1-r1

5.3.1-r2

5.3.2-r0

5.3.2-r1

5.3.2-r2

5.3.2-r3

5.3.2-r4

5.3.2-r5

5.3.2-r6

5.3.2-r7

5.3.2-r8

5.3.2-r9

5.3.2-r10

5.3.3-r0

5.3.4-r0

5.3.5-r0

5.3.5-r1

5.3.5-r2

5.3.5-r3

Alpine:v3.4 / strongswan

Package

Name: strongswan
Purl: pkg:apk/alpine/strongswan?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.4.0-r3

Affected versions

4.*

4.5.2-r0

4.6.1-r0

5.*

5.1.1-r0

5.1.1-r1

5.1.1-r2

5.1.1-r3

5.1.3-r0

5.2.0-r0

5.2.0-r1

5.2.0-r2

5.2.2-r0

5.3.0-r0

5.3.0-r1

5.3.0-r2

5.3.1-r1

5.3.1-r2

5.3.2-r0

5.3.2-r1

5.3.2-r2

5.3.2-r3

5.3.2-r4

5.3.2-r5

5.3.2-r6

5.3.2-r7

5.3.2-r8

5.3.2-r9

5.3.2-r10

5.3.3-r0

5.3.4-r0

5.3.5-r0

5.3.5-r1

5.3.5-r2

5.4.0-r0

5.4.0-r1

5.4.0-r2

Alpine:v3.5 / strongswan

Package

Name: strongswan
Purl: pkg:apk/alpine/strongswan?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.5.3-r1

Affected versions

4.*

4.5.2-r0

4.6.1-r0

5.*

5.1.1-r0

5.1.1-r1

5.1.1-r2

5.1.1-r3

5.1.3-r0

5.2.0-r0

5.2.0-r1

5.2.0-r2

5.2.2-r0

5.3.0-r0

5.3.0-r1

5.3.0-r2

5.3.1-r1

5.3.1-r2

5.3.2-r0

5.3.2-r1

5.3.2-r2

5.3.2-r3

5.3.2-r4

5.3.2-r5

5.3.2-r6

5.3.2-r7

5.3.2-r8

5.3.2-r9

5.3.2-r10

5.3.3-r0

5.3.4-r0

5.3.5-r0

5.3.5-r1

5.3.5-r2

5.4.0-r0

5.4.0-r1

5.5.0-r0

5.5.0-r1

5.5.1-r0

5.5.1-r1

5.5.3-r0

Alpine:v3.6 / strongswan

Package

Name: strongswan
Purl: pkg:apk/alpine/strongswan?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.5.3-r1

Affected versions

4.*

4.5.2-r0

4.6.1-r0

5.*

5.1.1-r0

5.1.1-r1

5.1.1-r2

5.1.1-r3

5.1.3-r0

5.2.0-r0

5.2.0-r1

5.2.0-r2

5.2.2-r0

5.3.0-r0

5.3.0-r1

5.3.0-r2

5.3.1-r1

5.3.1-r2

5.3.2-r0

5.3.2-r1

5.3.2-r2

5.3.2-r3

5.3.2-r4

5.3.2-r5

5.3.2-r6

5.3.2-r7

5.3.2-r8

5.3.2-r9

5.3.2-r10

5.3.3-r0

5.3.4-r0

5.3.5-r0

5.3.5-r1

5.3.5-r2

5.4.0-r0

5.4.0-r1

5.5.0-r0

5.5.0-r1

5.5.1-r0

5.5.1-r1

5.5.2-r0

5.5.2-r1

5.5.3-r0

Debian:11 / strongswan

Package

Name: strongswan
Purl: pkg:deb/debian/strongswan?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.6.0-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:12 / strongswan

Package

Name: strongswan
Purl: pkg:deb/debian/strongswan?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.6.0-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:13 / strongswan

Package

Name: strongswan
Purl: pkg:deb/debian/strongswan?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.6.0-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Git / github.com/strongswan/strongswan

Affected ranges

Type: GIT
Repo: https://github.com/strongswan/strongswan
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Last affected

65ce7ec0c4b83534f5b01ea0c0d517b8fde0cca4

Affected versions

4.*

4.0.0

4.0.1

4.0.2

4.0.3

4.0.4

4.0.5

4.0.6

4.0.7

4.1.0

4.1.1

4.1.10

4.1.11

4.1.2

4.1.3

4.1.4

4.1.5

4.1.6

4.1.7

4.1.8

4.1.9

4.2.0

4.2.1

4.2.10

4.2.11

4.2.12

4.2.13

4.2.14

4.2.2

4.2.3

4.2.4

4.2.5

4.2.6

4.2.7

4.2.8

4.2.9

4.3.0

4.3.1

4.3.2

4.3.3

4.3.4

4.3.5

4.3.5rc1

4.3.6

4.4.0

4.4.1

4.5.0

4.5.1

4.5.2

4.5.3

4.6.0

4.6.1

4.6.2

4.6.3

5.*

5.0.0

5.0.1

5.0.2

5.0.2dr4

5.0.2rc1

5.0.3

5.0.3dr1

5.0.3dr2

5.0.3dr3

5.0.3rc1

5.0.4

5.1.0

5.1.0dr1

5.1.0dr2

5.1.0rc1

5.1.1

5.1.1dr1

5.1.1dr2

5.1.1dr3

5.1.1dr4

5.1.1rc1

5.1.2

5.1.2.dr2

5.1.2dr1

5.1.2dr3

5.1.2rc1

5.1.2rc2

5.1.3

5.1.3dr1

5.1.3rc1

5.2.0

5.2.0dr1

5.2.0dr2

5.2.0dr3

5.2.0dr4

5.2.0dr5

5.2.0dr6

5.2.0rc1

5.2.1

5.2.1dr1

5.2.1rc1

5.2.2

5.2.2dr1

5.2.2rc1

5.3.0

5.3.0dr1

5.3.0rc1

5.3.1

5.3.1dr1

5.3.1rc1

5.3.2

5.3.3

5.3.3dr1

5.3.3dr3

5.3.3dr4

5.3.3dr5

5.3.3dr6

5.3.3rc2

5.3.4

5.3.4dr1

5.3.4dr2

5.3.4dr3

5.3.4rc1

5.3.5

5.4.0

5.4.0dr1

5.4.0dr2

5.4.0dr3

5.4.0dr4

5.4.0dr5

5.4.0dr6

5.4.0dr7

5.4.0dr8

5.4.0rc1

5.4.1dr1

5.4.1dr2

5.4.1dr3

5.4.1dr4

5.5.0

5.5.0dr1

5.5.0rc1

5.5.1

5.5.1dr1

5.5.1dr2

5.5.1dr3

5.5.1dr4

5.5.1dr5

5.5.1rc1

5.5.1rc2

5.5.2

5.5.2dr1

5.5.2dr2

5.5.2dr3

5.5.2dr4

5.5.2dr5

5.5.2dr6

5.5.2dr7

5.5.2rc1

5.5.3

5.5.3dr1

5.5.3dr2