The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate with an RSASSA-PSS signature. For example, this can be triggered by an unrelated self-signed CA certificate sent by an initiator. Remote code execution cannot occur.
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "5.6.2-1ubuntu2.7", "binary_name": "charon-cmd" }, { "binary_version": "5.6.2-1ubuntu2.7", "binary_name": "charon-cmd-dbgsym" }, { "binary_version": "5.6.2-1ubuntu2.7", "binary_name": "charon-systemd" }, { "binary_version": "5.6.2-1ubuntu2.7", "binary_name": "charon-systemd-dbgsym" }, { "binary_version": "5.6.2-1ubuntu2.7", "binary_name": "libcharon-extra-plugins" }, { "binary_version": "5.6.2-1ubuntu2.7", "binary_name": "libcharon-extra-plugins-dbgsym" }, { "binary_version": "5.6.2-1ubuntu2.7", "binary_name": "libcharon-standard-plugins" }, { "binary_version": "5.6.2-1ubuntu2.7", "binary_name": "libcharon-standard-plugins-dbgsym" }, { "binary_version": "5.6.2-1ubuntu2.7", "binary_name": "libstrongswan" }, { "binary_version": "5.6.2-1ubuntu2.7", "binary_name": "libstrongswan-dbgsym" }, { "binary_version": "5.6.2-1ubuntu2.7", "binary_name": "libstrongswan-extra-plugins" }, { "binary_version": "5.6.2-1ubuntu2.7", "binary_name": "libstrongswan-extra-plugins-dbgsym" }, { "binary_version": "5.6.2-1ubuntu2.7", "binary_name": "libstrongswan-standard-plugins" }, { "binary_version": "5.6.2-1ubuntu2.7", "binary_name": "libstrongswan-standard-plugins-dbgsym" }, { "binary_version": "5.6.2-1ubuntu2.7", "binary_name": "strongswan" }, { "binary_version": "5.6.2-1ubuntu2.7", "binary_name": "strongswan-charon" }, { "binary_version": "5.6.2-1ubuntu2.7", "binary_name": "strongswan-charon-dbgsym" }, { "binary_version": "5.6.2-1ubuntu2.7", "binary_name": "strongswan-libcharon" }, { "binary_version": "5.6.2-1ubuntu2.7", "binary_name": "strongswan-libcharon-dbgsym" }, { "binary_version": "5.6.2-1ubuntu2.7", "binary_name": "strongswan-nm" }, { "binary_version": "5.6.2-1ubuntu2.7", "binary_name": "strongswan-nm-dbgsym" }, { "binary_version": "5.6.2-1ubuntu2.7", "binary_name": "strongswan-pki" }, { "binary_version": "5.6.2-1ubuntu2.7", "binary_name": "strongswan-pki-dbgsym" }, { "binary_version": "5.6.2-1ubuntu2.7", "binary_name": "strongswan-scepclient" }, { "binary_version": "5.6.2-1ubuntu2.7", "binary_name": "strongswan-scepclient-dbgsym" }, { "binary_version": "5.6.2-1ubuntu2.7", "binary_name": "strongswan-starter" }, { "binary_version": "5.6.2-1ubuntu2.7", "binary_name": "strongswan-starter-dbgsym" }, { "binary_version": "5.6.2-1ubuntu2.7", "binary_name": "strongswan-swanctl" }, { "binary_version": "5.6.2-1ubuntu2.7", "binary_name": "strongswan-swanctl-dbgsym" }, { "binary_version": "5.6.2-1ubuntu2.7", "binary_name": "strongswan-tnc-base" }, { "binary_version": "5.6.2-1ubuntu2.7", "binary_name": "strongswan-tnc-base-dbgsym" }, { "binary_version": "5.6.2-1ubuntu2.7", "binary_name": "strongswan-tnc-client" }, { "binary_version": "5.6.2-1ubuntu2.7", "binary_name": "strongswan-tnc-client-dbgsym" }, { "binary_version": "5.6.2-1ubuntu2.7", "binary_name": "strongswan-tnc-ifmap" }, { "binary_version": "5.6.2-1ubuntu2.7", "binary_name": "strongswan-tnc-ifmap-dbgsym" }, { "binary_version": "5.6.2-1ubuntu2.7", "binary_name": "strongswan-tnc-pdp" }, { "binary_version": "5.6.2-1ubuntu2.7", "binary_name": "strongswan-tnc-pdp-dbgsym" }, { "binary_version": "5.6.2-1ubuntu2.7", "binary_name": "strongswan-tnc-server" }, { "binary_version": "5.6.2-1ubuntu2.7", "binary_name": "strongswan-tnc-server-dbgsym" } ] }
{ "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "5.6.2-1ubuntu2.fips.2.7.1", "binary_name": "charon-cmd" }, { "binary_version": "5.6.2-1ubuntu2.fips.2.7.1", "binary_name": "charon-cmd-dbgsym" }, { "binary_version": "5.6.2-1ubuntu2.fips.2.7.1", "binary_name": "charon-systemd" }, { "binary_version": "5.6.2-1ubuntu2.fips.2.7.1", "binary_name": "charon-systemd-dbgsym" }, { "binary_version": "5.6.2-1ubuntu2.fips.2.7.1", "binary_name": "libcharon-extra-plugins" }, { "binary_version": "5.6.2-1ubuntu2.fips.2.7.1", "binary_name": "libcharon-extra-plugins-dbgsym" }, { "binary_version": "5.6.2-1ubuntu2.fips.2.7.1", "binary_name": "libcharon-standard-plugins" }, { "binary_version": "5.6.2-1ubuntu2.fips.2.7.1", "binary_name": "libcharon-standard-plugins-dbgsym" }, { "binary_version": "5.6.2-1ubuntu2.fips.2.7.1", "binary_name": "libstrongswan" }, { "binary_version": "5.6.2-1ubuntu2.fips.2.7.1", "binary_name": "libstrongswan-dbgsym" }, { "binary_version": "5.6.2-1ubuntu2.fips.2.7.1", "binary_name": "libstrongswan-extra-plugins" }, { "binary_version": "5.6.2-1ubuntu2.fips.2.7.1", "binary_name": "libstrongswan-extra-plugins-dbgsym" }, { "binary_version": "5.6.2-1ubuntu2.fips.2.7.1", "binary_name": "libstrongswan-standard-plugins" }, { "binary_version": "5.6.2-1ubuntu2.fips.2.7.1", "binary_name": "libstrongswan-standard-plugins-dbgsym" }, { "binary_version": "5.6.2-1ubuntu2.fips.2.7.1", "binary_name": "strongswan" }, { "binary_version": "5.6.2-1ubuntu2.fips.2.7.1", "binary_name": "strongswan-charon" }, { "binary_version": "5.6.2-1ubuntu2.fips.2.7.1", "binary_name": "strongswan-charon-dbgsym" }, { "binary_version": "5.6.2-1ubuntu2.fips.2.7.1", "binary_name": "strongswan-hmac" }, { "binary_version": "5.6.2-1ubuntu2.fips.2.7.1", "binary_name": "strongswan-libcharon" }, { "binary_version": "5.6.2-1ubuntu2.fips.2.7.1", "binary_name": "strongswan-libcharon-dbgsym" }, { "binary_version": "5.6.2-1ubuntu2.fips.2.7.1", "binary_name": "strongswan-nm" }, { "binary_version": "5.6.2-1ubuntu2.fips.2.7.1", "binary_name": "strongswan-nm-dbgsym" }, { "binary_version": "5.6.2-1ubuntu2.fips.2.7.1", "binary_name": "strongswan-pki" }, { "binary_version": "5.6.2-1ubuntu2.fips.2.7.1", "binary_name": "strongswan-pki-dbgsym" }, { "binary_version": "5.6.2-1ubuntu2.fips.2.7.1", "binary_name": "strongswan-scepclient" }, { "binary_version": "5.6.2-1ubuntu2.fips.2.7.1", "binary_name": "strongswan-scepclient-dbgsym" }, { "binary_version": "5.6.2-1ubuntu2.fips.2.7.1", "binary_name": "strongswan-starter" }, { "binary_version": "5.6.2-1ubuntu2.fips.2.7.1", "binary_name": "strongswan-starter-dbgsym" }, { "binary_version": "5.6.2-1ubuntu2.fips.2.7.1", "binary_name": "strongswan-swanctl" }, { "binary_version": "5.6.2-1ubuntu2.fips.2.7.1", "binary_name": "strongswan-swanctl-dbgsym" }, { "binary_version": "5.6.2-1ubuntu2.fips.2.7.1", "binary_name": "strongswan-tnc-base" }, { "binary_version": "5.6.2-1ubuntu2.fips.2.7.1", "binary_name": "strongswan-tnc-base-dbgsym" }, { "binary_version": "5.6.2-1ubuntu2.fips.2.7.1", "binary_name": "strongswan-tnc-client" }, { "binary_version": "5.6.2-1ubuntu2.fips.2.7.1", "binary_name": "strongswan-tnc-client-dbgsym" }, { "binary_version": "5.6.2-1ubuntu2.fips.2.7.1", "binary_name": "strongswan-tnc-ifmap" }, { "binary_version": "5.6.2-1ubuntu2.fips.2.7.1", "binary_name": "strongswan-tnc-ifmap-dbgsym" }, { "binary_version": "5.6.2-1ubuntu2.fips.2.7.1", "binary_name": "strongswan-tnc-pdp" }, { "binary_version": "5.6.2-1ubuntu2.fips.2.7.1", "binary_name": "strongswan-tnc-pdp-dbgsym" }, { "binary_version": "5.6.2-1ubuntu2.fips.2.7.1", "binary_name": "strongswan-tnc-server" }, { "binary_version": "5.6.2-1ubuntu2.fips.2.7.1", "binary_name": "strongswan-tnc-server-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "5.8.2-1ubuntu3.3", "binary_name": "charon-cmd" }, { "binary_version": "5.8.2-1ubuntu3.3", "binary_name": "charon-cmd-dbgsym" }, { "binary_version": "5.8.2-1ubuntu3.3", "binary_name": "charon-systemd" }, { "binary_version": "5.8.2-1ubuntu3.3", "binary_name": "charon-systemd-dbgsym" }, { "binary_version": "5.8.2-1ubuntu3.3", "binary_name": "libcharon-extauth-plugins" }, { "binary_version": "5.8.2-1ubuntu3.3", "binary_name": "libcharon-extauth-plugins-dbgsym" }, { "binary_version": "5.8.2-1ubuntu3.3", "binary_name": "libcharon-extra-plugins" }, { "binary_version": "5.8.2-1ubuntu3.3", "binary_name": "libcharon-extra-plugins-dbgsym" }, { "binary_version": "5.8.2-1ubuntu3.3", "binary_name": "libcharon-standard-plugins" }, { "binary_version": "5.8.2-1ubuntu3.3", "binary_name": "libstrongswan" }, { "binary_version": "5.8.2-1ubuntu3.3", "binary_name": "libstrongswan-dbgsym" }, { "binary_version": "5.8.2-1ubuntu3.3", "binary_name": "libstrongswan-extra-plugins" }, { "binary_version": "5.8.2-1ubuntu3.3", "binary_name": "libstrongswan-extra-plugins-dbgsym" }, { "binary_version": "5.8.2-1ubuntu3.3", "binary_name": "libstrongswan-standard-plugins" }, { "binary_version": "5.8.2-1ubuntu3.3", "binary_name": "libstrongswan-standard-plugins-dbgsym" }, { "binary_version": "5.8.2-1ubuntu3.3", "binary_name": "strongswan" }, { "binary_version": "5.8.2-1ubuntu3.3", "binary_name": "strongswan-charon" }, { "binary_version": "5.8.2-1ubuntu3.3", "binary_name": "strongswan-charon-dbgsym" }, { "binary_version": "5.8.2-1ubuntu3.3", "binary_name": "strongswan-libcharon" }, { "binary_version": "5.8.2-1ubuntu3.3", "binary_name": "strongswan-libcharon-dbgsym" }, { "binary_version": "5.8.2-1ubuntu3.3", "binary_name": "strongswan-nm" }, { "binary_version": "5.8.2-1ubuntu3.3", "binary_name": "strongswan-nm-dbgsym" }, { "binary_version": "5.8.2-1ubuntu3.3", "binary_name": "strongswan-pki" }, { "binary_version": "5.8.2-1ubuntu3.3", "binary_name": "strongswan-pki-dbgsym" }, { "binary_version": "5.8.2-1ubuntu3.3", "binary_name": "strongswan-scepclient" }, { "binary_version": "5.8.2-1ubuntu3.3", "binary_name": "strongswan-scepclient-dbgsym" }, { "binary_version": "5.8.2-1ubuntu3.3", "binary_name": "strongswan-starter" }, { "binary_version": "5.8.2-1ubuntu3.3", "binary_name": "strongswan-starter-dbgsym" }, { "binary_version": "5.8.2-1ubuntu3.3", "binary_name": "strongswan-swanctl" }, { "binary_version": "5.8.2-1ubuntu3.3", "binary_name": "strongswan-swanctl-dbgsym" }, { "binary_version": "5.8.2-1ubuntu3.3", "binary_name": "strongswan-tnc-base" }, { "binary_version": "5.8.2-1ubuntu3.3", "binary_name": "strongswan-tnc-client" }, { "binary_version": "5.8.2-1ubuntu3.3", "binary_name": "strongswan-tnc-ifmap" }, { "binary_version": "5.8.2-1ubuntu3.3", "binary_name": "strongswan-tnc-pdp" }, { "binary_version": "5.8.2-1ubuntu3.3", "binary_name": "strongswan-tnc-server" } ] }
{ "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "5.8.2-1ubuntu3.fips.3.3.1", "binary_name": "charon-cmd" }, { "binary_version": "5.8.2-1ubuntu3.fips.3.3.1", "binary_name": "charon-cmd-dbgsym" }, { "binary_version": "5.8.2-1ubuntu3.fips.3.3.1", "binary_name": "charon-systemd" }, { "binary_version": "5.8.2-1ubuntu3.fips.3.3.1", "binary_name": "charon-systemd-dbgsym" }, { "binary_version": "5.8.2-1ubuntu3.fips.3.3.1", "binary_name": "libcharon-extauth-plugins" }, { "binary_version": "5.8.2-1ubuntu3.fips.3.3.1", "binary_name": "libcharon-extauth-plugins-dbgsym" }, { "binary_version": "5.8.2-1ubuntu3.fips.3.3.1", "binary_name": "libcharon-extra-plugins" }, { "binary_version": "5.8.2-1ubuntu3.fips.3.3.1", "binary_name": "libcharon-extra-plugins-dbgsym" }, { "binary_version": "5.8.2-1ubuntu3.fips.3.3.1", "binary_name": "libcharon-standard-plugins" }, { "binary_version": "5.8.2-1ubuntu3.fips.3.3.1", "binary_name": "libstrongswan" }, { "binary_version": "5.8.2-1ubuntu3.fips.3.3.1", "binary_name": "libstrongswan-dbgsym" }, { "binary_version": "5.8.2-1ubuntu3.fips.3.3.1", "binary_name": "libstrongswan-extra-plugins" }, { "binary_version": "5.8.2-1ubuntu3.fips.3.3.1", "binary_name": "libstrongswan-extra-plugins-dbgsym" }, { "binary_version": "5.8.2-1ubuntu3.fips.3.3.1", "binary_name": "libstrongswan-standard-plugins" }, { "binary_version": "5.8.2-1ubuntu3.fips.3.3.1", "binary_name": "libstrongswan-standard-plugins-dbgsym" }, { "binary_version": "5.8.2-1ubuntu3.fips.3.3.1", "binary_name": "strongswan" }, { "binary_version": "5.8.2-1ubuntu3.fips.3.3.1", "binary_name": "strongswan-charon" }, { "binary_version": "5.8.2-1ubuntu3.fips.3.3.1", "binary_name": "strongswan-charon-dbgsym" }, { "binary_version": "5.8.2-1ubuntu3.fips.3.3.1", "binary_name": "strongswan-hmac" }, { "binary_version": "5.8.2-1ubuntu3.fips.3.3.1", "binary_name": "strongswan-libcharon" }, { "binary_version": "5.8.2-1ubuntu3.fips.3.3.1", "binary_name": "strongswan-libcharon-dbgsym" }, { "binary_version": "5.8.2-1ubuntu3.fips.3.3.1", "binary_name": "strongswan-nm" }, { "binary_version": "5.8.2-1ubuntu3.fips.3.3.1", "binary_name": "strongswan-nm-dbgsym" }, { "binary_version": "5.8.2-1ubuntu3.fips.3.3.1", "binary_name": "strongswan-pki" }, { "binary_version": "5.8.2-1ubuntu3.fips.3.3.1", "binary_name": "strongswan-pki-dbgsym" }, { "binary_version": "5.8.2-1ubuntu3.fips.3.3.1", "binary_name": "strongswan-scepclient" }, { "binary_version": "5.8.2-1ubuntu3.fips.3.3.1", "binary_name": "strongswan-scepclient-dbgsym" }, { "binary_version": "5.8.2-1ubuntu3.fips.3.3.1", "binary_name": "strongswan-starter" }, { "binary_version": "5.8.2-1ubuntu3.fips.3.3.1", "binary_name": "strongswan-starter-dbgsym" }, { "binary_version": "5.8.2-1ubuntu3.fips.3.3.1", "binary_name": "strongswan-swanctl" }, { "binary_version": "5.8.2-1ubuntu3.fips.3.3.1", "binary_name": "strongswan-swanctl-dbgsym" }, { "binary_version": "5.8.2-1ubuntu3.fips.3.3.1", "binary_name": "strongswan-tnc-base" }, { "binary_version": "5.8.2-1ubuntu3.fips.3.3.1", "binary_name": "strongswan-tnc-client" }, { "binary_version": "5.8.2-1ubuntu3.fips.3.3.1", "binary_name": "strongswan-tnc-ifmap" }, { "binary_version": "5.8.2-1ubuntu3.fips.3.3.1", "binary_name": "strongswan-tnc-pdp" }, { "binary_version": "5.8.2-1ubuntu3.fips.3.3.1", "binary_name": "strongswan-tnc-server" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "5.9.1-1ubuntu3.1", "binary_name": "charon-cmd" }, { "binary_version": "5.9.1-1ubuntu3.1", "binary_name": "charon-cmd-dbgsym" }, { "binary_version": "5.9.1-1ubuntu3.1", "binary_name": "charon-systemd" }, { "binary_version": "5.9.1-1ubuntu3.1", "binary_name": "charon-systemd-dbgsym" }, { "binary_version": "5.9.1-1ubuntu3.1", "binary_name": "libcharon-extauth-plugins" }, { "binary_version": "5.9.1-1ubuntu3.1", "binary_name": "libcharon-extauth-plugins-dbgsym" }, { "binary_version": "5.9.1-1ubuntu3.1", "binary_name": "libcharon-extra-plugins" }, { "binary_version": "5.9.1-1ubuntu3.1", "binary_name": "libcharon-extra-plugins-dbgsym" }, { "binary_version": "5.9.1-1ubuntu3.1", "binary_name": "libstrongswan" }, { "binary_version": "5.9.1-1ubuntu3.1", "binary_name": "libstrongswan-dbgsym" }, { "binary_version": "5.9.1-1ubuntu3.1", "binary_name": "libstrongswan-extra-plugins" }, { "binary_version": "5.9.1-1ubuntu3.1", "binary_name": "libstrongswan-extra-plugins-dbgsym" }, { "binary_version": "5.9.1-1ubuntu3.1", "binary_name": "libstrongswan-standard-plugins" }, { "binary_version": "5.9.1-1ubuntu3.1", "binary_name": "libstrongswan-standard-plugins-dbgsym" }, { "binary_version": "5.9.1-1ubuntu3.1", "binary_name": "strongswan" }, { "binary_version": "5.9.1-1ubuntu3.1", "binary_name": "strongswan-charon" }, { "binary_version": "5.9.1-1ubuntu3.1", "binary_name": "strongswan-charon-dbgsym" }, { "binary_version": "5.9.1-1ubuntu3.1", "binary_name": "strongswan-libcharon" }, { "binary_version": "5.9.1-1ubuntu3.1", "binary_name": "strongswan-libcharon-dbgsym" }, { "binary_version": "5.9.1-1ubuntu3.1", "binary_name": "strongswan-nm" }, { "binary_version": "5.9.1-1ubuntu3.1", "binary_name": "strongswan-nm-dbgsym" }, { "binary_version": "5.9.1-1ubuntu3.1", "binary_name": "strongswan-pki" }, { "binary_version": "5.9.1-1ubuntu3.1", "binary_name": "strongswan-pki-dbgsym" }, { "binary_version": "5.9.1-1ubuntu3.1", "binary_name": "strongswan-scepclient" }, { "binary_version": "5.9.1-1ubuntu3.1", "binary_name": "strongswan-scepclient-dbgsym" }, { "binary_version": "5.9.1-1ubuntu3.1", "binary_name": "strongswan-starter" }, { "binary_version": "5.9.1-1ubuntu3.1", "binary_name": "strongswan-starter-dbgsym" }, { "binary_version": "5.9.1-1ubuntu3.1", "binary_name": "strongswan-swanctl" }, { "binary_version": "5.9.1-1ubuntu3.1", "binary_name": "strongswan-swanctl-dbgsym" } ] }