OESA-2023-1945

See a problem?
Please try reporting it to the source first.

Source

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2023-1945

Import Source

https://repo.openeuler.org/security/data/osv/OESA-2023-1945.json

JSON Data

https://api.osv.dev/v1/vulns/OESA-2023-1945

Upstream

CVE-2023-41913

Published

2023-12-22T11:06:32Z

Modified

2025-09-03T06:19:26.365289Z

Summary

strongswan security update

Details

The strongSwan IPsec implementation supports both the IKEv1 and IKEv2 key exchange protocols in conjunction with the native NETKEY IPsec stack of the Linux kernel.

Security Fix(es):

strongSwan before 5.9.12 has a buffer overflow and possible unauthenticated remote code execution via a DH public value that exceeds the internal buffer in charon-tkm's DH proxy. The earliest affected version is 5.3.0. An attack can occur via a crafted IKESAINIT message.(CVE-2023-41913)

Database specific

{
    "severity": "Critical"
}

References

Affected packages

openEuler:20.03-LTS-SP1

strongswan

Package

Name: strongswan
Purl: pkg:rpm/openEuler/strongswan&distro=openEuler-20.03-LTS-SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.7.2-11.oe1

Ecosystem specific

{
    "noarch": [
        "strongswan-help-5.7.2-11.oe1.noarch.rpm"
    ],
    "aarch64": [
        "strongswan-5.7.2-11.oe1.aarch64.rpm",
        "strongswan-debugsource-5.7.2-11.oe1.aarch64.rpm",
        "strongswan-debuginfo-5.7.2-11.oe1.aarch64.rpm"
    ],
    "x86_64": [
        "strongswan-debugsource-5.7.2-11.oe1.x86_64.rpm",
        "strongswan-5.7.2-11.oe1.x86_64.rpm",
        "strongswan-debuginfo-5.7.2-11.oe1.x86_64.rpm"
    ],
    "src": [
        "strongswan-5.7.2-11.oe1.src.rpm"
    ]
}

openEuler:20.03-LTS-SP3

strongswan

Package

Name: strongswan
Purl: pkg:rpm/openEuler/strongswan&distro=openEuler-20.03-LTS-SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.7.2-11.oe1

Ecosystem specific

{
    "noarch": [
        "strongswan-help-5.7.2-11.oe1.noarch.rpm"
    ],
    "aarch64": [
        "strongswan-5.7.2-11.oe1.aarch64.rpm",
        "strongswan-debugsource-5.7.2-11.oe1.aarch64.rpm",
        "strongswan-debuginfo-5.7.2-11.oe1.aarch64.rpm"
    ],
    "x86_64": [
        "strongswan-5.7.2-11.oe1.x86_64.rpm",
        "strongswan-debugsource-5.7.2-11.oe1.x86_64.rpm",
        "strongswan-debuginfo-5.7.2-11.oe1.x86_64.rpm"
    ],
    "src": [
        "strongswan-5.7.2-11.oe1.src.rpm"
    ]
}

openEuler:20.03-LTS-SP4

strongswan

Package

Name: strongswan
Purl: pkg:rpm/openEuler/strongswan&distro=openEuler-20.03-LTS-SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.7.2-11.oe2003sp4

Ecosystem specific

{
    "noarch": [
        "strongswan-help-5.7.2-11.oe2003sp4.noarch.rpm"
    ],
    "aarch64": [
        "strongswan-5.7.2-11.oe2003sp4.aarch64.rpm",
        "strongswan-debugsource-5.7.2-11.oe2003sp4.aarch64.rpm",
        "strongswan-debuginfo-5.7.2-11.oe2003sp4.aarch64.rpm"
    ],
    "x86_64": [
        "strongswan-5.7.2-11.oe2003sp4.x86_64.rpm",
        "strongswan-debugsource-5.7.2-11.oe2003sp4.x86_64.rpm",
        "strongswan-debuginfo-5.7.2-11.oe2003sp4.x86_64.rpm"
    ],
    "src": [
        "strongswan-5.7.2-11.oe2003sp4.src.rpm"
    ]
}

openEuler:22.03-LTS

strongswan

Package

Name: strongswan
Purl: pkg:rpm/openEuler/strongswan&distro=openEuler-22.03-LTS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.9.7-5.oe2203sp2

Ecosystem specific

{
    "aarch64": [
        "strongswan-debugsource-5.7.2-14.oe2203.aarch64.rpm",
        "strongswan-tnc-imcvs-5.7.2-14.oe2203.aarch64.rpm",
        "strongswan-charon-nm-5.7.2-14.oe2203.aarch64.rpm",
        "strongswan-debuginfo-5.7.2-14.oe2203.aarch64.rpm",
        "strongswan-libipsec-5.7.2-14.oe2203.aarch64.rpm",
        "strongswan-sqlite-5.7.2-14.oe2203.aarch64.rpm",
        "strongswan-5.7.2-14.oe2203.aarch64.rpm",
        "strongswan-libipsec-5.9.7-5.oe2203sp1.aarch64.rpm",
        "strongswan-sqlite-5.9.7-5.oe2203sp1.aarch64.rpm",
        "strongswan-5.9.7-5.oe2203sp1.aarch64.rpm",
        "strongswan-tnc-imcvs-5.9.7-5.oe2203sp1.aarch64.rpm",
        "strongswan-charon-nm-5.9.7-5.oe2203sp1.aarch64.rpm",
        "strongswan-debugsource-5.9.7-5.oe2203sp1.aarch64.rpm",
        "strongswan-debuginfo-5.9.7-5.oe2203sp1.aarch64.rpm",
        "strongswan-debuginfo-5.9.7-5.oe2203sp2.aarch64.rpm",
        "strongswan-sqlite-5.9.7-5.oe2203sp2.aarch64.rpm",
        "strongswan-libipsec-5.9.7-5.oe2203sp2.aarch64.rpm",
        "strongswan-tnc-imcvs-5.9.7-5.oe2203sp2.aarch64.rpm",
        "strongswan-charon-nm-5.9.7-5.oe2203sp2.aarch64.rpm",
        "strongswan-debugsource-5.9.7-5.oe2203sp2.aarch64.rpm",
        "strongswan-5.9.7-5.oe2203sp2.aarch64.rpm"
    ],
    "x86_64": [
        "strongswan-tnc-imcvs-5.7.2-14.oe2203.x86_64.rpm",
        "strongswan-debuginfo-5.7.2-14.oe2203.x86_64.rpm",
        "strongswan-sqlite-5.7.2-14.oe2203.x86_64.rpm",
        "strongswan-5.7.2-14.oe2203.x86_64.rpm",
        "strongswan-charon-nm-5.7.2-14.oe2203.x86_64.rpm",
        "strongswan-debugsource-5.7.2-14.oe2203.x86_64.rpm",
        "strongswan-libipsec-5.7.2-14.oe2203.x86_64.rpm",
        "strongswan-debugsource-5.9.7-5.oe2203sp1.x86_64.rpm",
        "strongswan-debuginfo-5.9.7-5.oe2203sp1.x86_64.rpm",
        "strongswan-libipsec-5.9.7-5.oe2203sp1.x86_64.rpm",
        "strongswan-charon-nm-5.9.7-5.oe2203sp1.x86_64.rpm",
        "strongswan-tnc-imcvs-5.9.7-5.oe2203sp1.x86_64.rpm",
        "strongswan-5.9.7-5.oe2203sp1.x86_64.rpm",
        "strongswan-sqlite-5.9.7-5.oe2203sp1.x86_64.rpm",
        "strongswan-debuginfo-5.9.7-5.oe2203sp2.x86_64.rpm",
        "strongswan-charon-nm-5.9.7-5.oe2203sp2.x86_64.rpm",
        "strongswan-sqlite-5.9.7-5.oe2203sp2.x86_64.rpm",
        "strongswan-debugsource-5.9.7-5.oe2203sp2.x86_64.rpm",
        "strongswan-libipsec-5.9.7-5.oe2203sp2.x86_64.rpm",
        "strongswan-tnc-imcvs-5.9.7-5.oe2203sp2.x86_64.rpm",
        "strongswan-5.9.7-5.oe2203sp2.x86_64.rpm"
    ],
    "src": [
        "strongswan-5.7.2-14.oe2203.src.rpm",
        "strongswan-5.9.7-5.oe2203sp1.src.rpm",
        "strongswan-5.9.7-5.oe2203sp2.src.rpm"
    ]
}

openEuler:22.03-LTS-SP1

strongswan

Package

Name: strongswan
Purl: pkg:rpm/openEuler/strongswan&distro=openEuler-22.03-LTS-SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.9.7-5.oe2203sp1

Ecosystem specific

{
    "aarch64": [
        "strongswan-libipsec-5.9.7-5.oe2203sp1.aarch64.rpm",
        "strongswan-sqlite-5.9.7-5.oe2203sp1.aarch64.rpm",
        "strongswan-5.9.7-5.oe2203sp1.aarch64.rpm",
        "strongswan-tnc-imcvs-5.9.7-5.oe2203sp1.aarch64.rpm",
        "strongswan-charon-nm-5.9.7-5.oe2203sp1.aarch64.rpm",
        "strongswan-debugsource-5.9.7-5.oe2203sp1.aarch64.rpm",
        "strongswan-debuginfo-5.9.7-5.oe2203sp1.aarch64.rpm"
    ],
    "x86_64": [
        "strongswan-debugsource-5.9.7-5.oe2203sp1.x86_64.rpm",
        "strongswan-debuginfo-5.9.7-5.oe2203sp1.x86_64.rpm",
        "strongswan-libipsec-5.9.7-5.oe2203sp1.x86_64.rpm",
        "strongswan-charon-nm-5.9.7-5.oe2203sp1.x86_64.rpm",
        "strongswan-tnc-imcvs-5.9.7-5.oe2203sp1.x86_64.rpm",
        "strongswan-5.9.7-5.oe2203sp1.x86_64.rpm",
        "strongswan-sqlite-5.9.7-5.oe2203sp1.x86_64.rpm"
    ],
    "src": [
        "strongswan-5.9.7-5.oe2203sp1.src.rpm"
    ]
}

openEuler:22.03-LTS-SP2

strongswan

Package

Name: strongswan
Purl: pkg:rpm/openEuler/strongswan&distro=openEuler-22.03-LTS-SP2

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.9.7-5.oe2203sp2

Ecosystem specific

{
    "aarch64": [
        "strongswan-debuginfo-5.9.7-5.oe2203sp2.aarch64.rpm",
        "strongswan-sqlite-5.9.7-5.oe2203sp2.aarch64.rpm",
        "strongswan-libipsec-5.9.7-5.oe2203sp2.aarch64.rpm",
        "strongswan-tnc-imcvs-5.9.7-5.oe2203sp2.aarch64.rpm",
        "strongswan-charon-nm-5.9.7-5.oe2203sp2.aarch64.rpm",
        "strongswan-debugsource-5.9.7-5.oe2203sp2.aarch64.rpm",
        "strongswan-5.9.7-5.oe2203sp2.aarch64.rpm"
    ],
    "x86_64": [
        "strongswan-debuginfo-5.9.7-5.oe2203sp2.x86_64.rpm",
        "strongswan-charon-nm-5.9.7-5.oe2203sp2.x86_64.rpm",
        "strongswan-sqlite-5.9.7-5.oe2203sp2.x86_64.rpm",
        "strongswan-debugsource-5.9.7-5.oe2203sp2.x86_64.rpm",
        "strongswan-libipsec-5.9.7-5.oe2203sp2.x86_64.rpm",
        "strongswan-tnc-imcvs-5.9.7-5.oe2203sp2.x86_64.rpm",
        "strongswan-5.9.7-5.oe2203sp2.x86_64.rpm"
    ],
    "src": [
        "strongswan-5.9.7-5.oe2203sp2.src.rpm"
    ]
}