The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate with an RSASSA-PSS signature. For example, this can be triggered by an unrelated self-signed CA certificate sent by an initiator. Remote code execution cannot occur.
{ "availability": "No subscription required", "binaries": [ { "binary_name": "charon-cmd", "binary_version": "5.6.2-1ubuntu2.7" }, { "binary_name": "charon-cmd-dbgsym", "binary_version": "5.6.2-1ubuntu2.7" }, { "binary_name": "charon-systemd", "binary_version": "5.6.2-1ubuntu2.7" }, { "binary_name": "charon-systemd-dbgsym", "binary_version": "5.6.2-1ubuntu2.7" }, { "binary_name": "libcharon-extra-plugins", "binary_version": "5.6.2-1ubuntu2.7" }, { "binary_name": "libcharon-extra-plugins-dbgsym", "binary_version": "5.6.2-1ubuntu2.7" }, { "binary_name": "libcharon-standard-plugins", "binary_version": "5.6.2-1ubuntu2.7" }, { "binary_name": "libcharon-standard-plugins-dbgsym", "binary_version": "5.6.2-1ubuntu2.7" }, { "binary_name": "libstrongswan", "binary_version": "5.6.2-1ubuntu2.7" }, { "binary_name": "libstrongswan-dbgsym", "binary_version": "5.6.2-1ubuntu2.7" }, { "binary_name": "libstrongswan-extra-plugins", "binary_version": "5.6.2-1ubuntu2.7" }, { "binary_name": "libstrongswan-extra-plugins-dbgsym", "binary_version": "5.6.2-1ubuntu2.7" }, { "binary_name": "libstrongswan-standard-plugins", "binary_version": "5.6.2-1ubuntu2.7" }, { "binary_name": "libstrongswan-standard-plugins-dbgsym", "binary_version": "5.6.2-1ubuntu2.7" }, { "binary_name": "strongswan", "binary_version": "5.6.2-1ubuntu2.7" }, { "binary_name": "strongswan-charon", "binary_version": "5.6.2-1ubuntu2.7" }, { "binary_name": "strongswan-charon-dbgsym", "binary_version": "5.6.2-1ubuntu2.7" }, { "binary_name": "strongswan-libcharon", "binary_version": "5.6.2-1ubuntu2.7" }, { "binary_name": "strongswan-libcharon-dbgsym", "binary_version": "5.6.2-1ubuntu2.7" }, { "binary_name": "strongswan-nm", "binary_version": "5.6.2-1ubuntu2.7" }, { "binary_name": "strongswan-nm-dbgsym", "binary_version": "5.6.2-1ubuntu2.7" }, { "binary_name": "strongswan-pki", "binary_version": "5.6.2-1ubuntu2.7" }, { "binary_name": "strongswan-pki-dbgsym", "binary_version": "5.6.2-1ubuntu2.7" }, { "binary_name": "strongswan-scepclient", "binary_version": "5.6.2-1ubuntu2.7" }, { "binary_name": "strongswan-scepclient-dbgsym", "binary_version": "5.6.2-1ubuntu2.7" }, { "binary_name": "strongswan-starter", "binary_version": "5.6.2-1ubuntu2.7" }, { "binary_name": "strongswan-starter-dbgsym", "binary_version": "5.6.2-1ubuntu2.7" }, { "binary_name": "strongswan-swanctl", "binary_version": "5.6.2-1ubuntu2.7" }, { "binary_name": "strongswan-swanctl-dbgsym", "binary_version": "5.6.2-1ubuntu2.7" }, { "binary_name": "strongswan-tnc-base", "binary_version": "5.6.2-1ubuntu2.7" }, { "binary_name": "strongswan-tnc-base-dbgsym", "binary_version": "5.6.2-1ubuntu2.7" }, { "binary_name": "strongswan-tnc-client", "binary_version": "5.6.2-1ubuntu2.7" }, { "binary_name": "strongswan-tnc-client-dbgsym", "binary_version": "5.6.2-1ubuntu2.7" }, { "binary_name": "strongswan-tnc-ifmap", "binary_version": "5.6.2-1ubuntu2.7" }, { "binary_name": "strongswan-tnc-ifmap-dbgsym", "binary_version": "5.6.2-1ubuntu2.7" }, { "binary_name": "strongswan-tnc-pdp", "binary_version": "5.6.2-1ubuntu2.7" }, { "binary_name": "strongswan-tnc-pdp-dbgsym", "binary_version": "5.6.2-1ubuntu2.7" }, { "binary_name": "strongswan-tnc-server", "binary_version": "5.6.2-1ubuntu2.7" }, { "binary_name": "strongswan-tnc-server-dbgsym", "binary_version": "5.6.2-1ubuntu2.7" } ], "ubuntu_priority": "medium" }
{ "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro", "binaries": [ { "binary_name": "charon-cmd", "binary_version": "5.6.2-1ubuntu2.fips.2.7.1" }, { "binary_name": "charon-cmd-dbgsym", "binary_version": "5.6.2-1ubuntu2.fips.2.7.1" }, { "binary_name": "charon-systemd", "binary_version": "5.6.2-1ubuntu2.fips.2.7.1" }, { "binary_name": "charon-systemd-dbgsym", "binary_version": "5.6.2-1ubuntu2.fips.2.7.1" }, { "binary_name": "libcharon-extra-plugins", "binary_version": "5.6.2-1ubuntu2.fips.2.7.1" }, { "binary_name": "libcharon-extra-plugins-dbgsym", "binary_version": "5.6.2-1ubuntu2.fips.2.7.1" }, { "binary_name": "libcharon-standard-plugins", "binary_version": "5.6.2-1ubuntu2.fips.2.7.1" }, { "binary_name": "libcharon-standard-plugins-dbgsym", "binary_version": "5.6.2-1ubuntu2.fips.2.7.1" }, { "binary_name": "libstrongswan", "binary_version": "5.6.2-1ubuntu2.fips.2.7.1" }, { "binary_name": "libstrongswan-dbgsym", "binary_version": "5.6.2-1ubuntu2.fips.2.7.1" }, { "binary_name": "libstrongswan-extra-plugins", "binary_version": "5.6.2-1ubuntu2.fips.2.7.1" }, { "binary_name": "libstrongswan-extra-plugins-dbgsym", "binary_version": "5.6.2-1ubuntu2.fips.2.7.1" }, { "binary_name": "libstrongswan-standard-plugins", "binary_version": "5.6.2-1ubuntu2.fips.2.7.1" }, { "binary_name": "libstrongswan-standard-plugins-dbgsym", "binary_version": "5.6.2-1ubuntu2.fips.2.7.1" }, { "binary_name": "strongswan", "binary_version": "5.6.2-1ubuntu2.fips.2.7.1" }, { "binary_name": "strongswan-charon", "binary_version": "5.6.2-1ubuntu2.fips.2.7.1" }, { "binary_name": "strongswan-charon-dbgsym", "binary_version": "5.6.2-1ubuntu2.fips.2.7.1" }, { "binary_name": "strongswan-hmac", "binary_version": "5.6.2-1ubuntu2.fips.2.7.1" }, { "binary_name": "strongswan-libcharon", "binary_version": "5.6.2-1ubuntu2.fips.2.7.1" }, { "binary_name": "strongswan-libcharon-dbgsym", "binary_version": "5.6.2-1ubuntu2.fips.2.7.1" }, { "binary_name": "strongswan-nm", "binary_version": "5.6.2-1ubuntu2.fips.2.7.1" }, { "binary_name": "strongswan-nm-dbgsym", "binary_version": "5.6.2-1ubuntu2.fips.2.7.1" }, { "binary_name": "strongswan-pki", "binary_version": "5.6.2-1ubuntu2.fips.2.7.1" }, { "binary_name": "strongswan-pki-dbgsym", "binary_version": "5.6.2-1ubuntu2.fips.2.7.1" }, { "binary_name": "strongswan-scepclient", "binary_version": "5.6.2-1ubuntu2.fips.2.7.1" }, { "binary_name": "strongswan-scepclient-dbgsym", "binary_version": "5.6.2-1ubuntu2.fips.2.7.1" }, { "binary_name": "strongswan-starter", "binary_version": "5.6.2-1ubuntu2.fips.2.7.1" }, { "binary_name": "strongswan-starter-dbgsym", "binary_version": "5.6.2-1ubuntu2.fips.2.7.1" }, { "binary_name": "strongswan-swanctl", "binary_version": "5.6.2-1ubuntu2.fips.2.7.1" }, { "binary_name": "strongswan-swanctl-dbgsym", "binary_version": "5.6.2-1ubuntu2.fips.2.7.1" }, { "binary_name": "strongswan-tnc-base", "binary_version": "5.6.2-1ubuntu2.fips.2.7.1" }, { "binary_name": "strongswan-tnc-base-dbgsym", "binary_version": "5.6.2-1ubuntu2.fips.2.7.1" }, { "binary_name": "strongswan-tnc-client", "binary_version": "5.6.2-1ubuntu2.fips.2.7.1" }, { "binary_name": "strongswan-tnc-client-dbgsym", "binary_version": "5.6.2-1ubuntu2.fips.2.7.1" }, { "binary_name": "strongswan-tnc-ifmap", "binary_version": "5.6.2-1ubuntu2.fips.2.7.1" }, { "binary_name": "strongswan-tnc-ifmap-dbgsym", "binary_version": "5.6.2-1ubuntu2.fips.2.7.1" }, { "binary_name": "strongswan-tnc-pdp", "binary_version": "5.6.2-1ubuntu2.fips.2.7.1" }, { "binary_name": "strongswan-tnc-pdp-dbgsym", "binary_version": "5.6.2-1ubuntu2.fips.2.7.1" }, { "binary_name": "strongswan-tnc-server", "binary_version": "5.6.2-1ubuntu2.fips.2.7.1" }, { "binary_name": "strongswan-tnc-server-dbgsym", "binary_version": "5.6.2-1ubuntu2.fips.2.7.1" } ], "ubuntu_priority": "medium" }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "charon-cmd", "binary_version": "5.8.2-1ubuntu3.3" }, { "binary_name": "charon-cmd-dbgsym", "binary_version": "5.8.2-1ubuntu3.3" }, { "binary_name": "charon-systemd", "binary_version": "5.8.2-1ubuntu3.3" }, { "binary_name": "charon-systemd-dbgsym", "binary_version": "5.8.2-1ubuntu3.3" }, { "binary_name": "libcharon-extauth-plugins", "binary_version": "5.8.2-1ubuntu3.3" }, { "binary_name": "libcharon-extauth-plugins-dbgsym", "binary_version": "5.8.2-1ubuntu3.3" }, { "binary_name": "libcharon-extra-plugins", "binary_version": "5.8.2-1ubuntu3.3" }, { "binary_name": "libcharon-extra-plugins-dbgsym", "binary_version": "5.8.2-1ubuntu3.3" }, { "binary_name": "libcharon-standard-plugins", "binary_version": "5.8.2-1ubuntu3.3" }, { "binary_name": "libstrongswan", "binary_version": "5.8.2-1ubuntu3.3" }, { "binary_name": "libstrongswan-dbgsym", "binary_version": "5.8.2-1ubuntu3.3" }, { "binary_name": "libstrongswan-extra-plugins", "binary_version": "5.8.2-1ubuntu3.3" }, { "binary_name": "libstrongswan-extra-plugins-dbgsym", "binary_version": "5.8.2-1ubuntu3.3" }, { "binary_name": "libstrongswan-standard-plugins", "binary_version": "5.8.2-1ubuntu3.3" }, { "binary_name": "libstrongswan-standard-plugins-dbgsym", "binary_version": "5.8.2-1ubuntu3.3" }, { "binary_name": "strongswan", "binary_version": "5.8.2-1ubuntu3.3" }, { "binary_name": "strongswan-charon", "binary_version": "5.8.2-1ubuntu3.3" }, { "binary_name": "strongswan-charon-dbgsym", "binary_version": "5.8.2-1ubuntu3.3" }, { "binary_name": "strongswan-libcharon", "binary_version": "5.8.2-1ubuntu3.3" }, { "binary_name": "strongswan-libcharon-dbgsym", "binary_version": "5.8.2-1ubuntu3.3" }, { "binary_name": "strongswan-nm", "binary_version": "5.8.2-1ubuntu3.3" }, { "binary_name": "strongswan-nm-dbgsym", "binary_version": "5.8.2-1ubuntu3.3" }, { "binary_name": "strongswan-pki", "binary_version": "5.8.2-1ubuntu3.3" }, { "binary_name": "strongswan-pki-dbgsym", "binary_version": "5.8.2-1ubuntu3.3" }, { "binary_name": "strongswan-scepclient", "binary_version": "5.8.2-1ubuntu3.3" }, { "binary_name": "strongswan-scepclient-dbgsym", "binary_version": "5.8.2-1ubuntu3.3" }, { "binary_name": "strongswan-starter", "binary_version": "5.8.2-1ubuntu3.3" }, { "binary_name": "strongswan-starter-dbgsym", "binary_version": "5.8.2-1ubuntu3.3" }, { "binary_name": "strongswan-swanctl", "binary_version": "5.8.2-1ubuntu3.3" }, { "binary_name": "strongswan-swanctl-dbgsym", "binary_version": "5.8.2-1ubuntu3.3" }, { "binary_name": "strongswan-tnc-base", "binary_version": "5.8.2-1ubuntu3.3" }, { "binary_name": "strongswan-tnc-client", "binary_version": "5.8.2-1ubuntu3.3" }, { "binary_name": "strongswan-tnc-ifmap", "binary_version": "5.8.2-1ubuntu3.3" }, { "binary_name": "strongswan-tnc-pdp", "binary_version": "5.8.2-1ubuntu3.3" }, { "binary_name": "strongswan-tnc-server", "binary_version": "5.8.2-1ubuntu3.3" } ], "ubuntu_priority": "medium" }
{ "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro", "binaries": [ { "binary_name": "charon-cmd", "binary_version": "5.8.2-1ubuntu3.fips.3.3.1" }, { "binary_name": "charon-cmd-dbgsym", "binary_version": "5.8.2-1ubuntu3.fips.3.3.1" }, { "binary_name": "charon-systemd", "binary_version": "5.8.2-1ubuntu3.fips.3.3.1" }, { "binary_name": "charon-systemd-dbgsym", "binary_version": "5.8.2-1ubuntu3.fips.3.3.1" }, { "binary_name": "libcharon-extauth-plugins", "binary_version": "5.8.2-1ubuntu3.fips.3.3.1" }, { "binary_name": "libcharon-extauth-plugins-dbgsym", "binary_version": "5.8.2-1ubuntu3.fips.3.3.1" }, { "binary_name": "libcharon-extra-plugins", "binary_version": "5.8.2-1ubuntu3.fips.3.3.1" }, { "binary_name": "libcharon-extra-plugins-dbgsym", "binary_version": "5.8.2-1ubuntu3.fips.3.3.1" }, { "binary_name": "libcharon-standard-plugins", "binary_version": "5.8.2-1ubuntu3.fips.3.3.1" }, { "binary_name": "libstrongswan", "binary_version": "5.8.2-1ubuntu3.fips.3.3.1" }, { "binary_name": "libstrongswan-dbgsym", "binary_version": "5.8.2-1ubuntu3.fips.3.3.1" }, { "binary_name": "libstrongswan-extra-plugins", "binary_version": "5.8.2-1ubuntu3.fips.3.3.1" }, { "binary_name": "libstrongswan-extra-plugins-dbgsym", "binary_version": "5.8.2-1ubuntu3.fips.3.3.1" }, { "binary_name": "libstrongswan-standard-plugins", "binary_version": "5.8.2-1ubuntu3.fips.3.3.1" }, { "binary_name": "libstrongswan-standard-plugins-dbgsym", "binary_version": "5.8.2-1ubuntu3.fips.3.3.1" }, { "binary_name": "strongswan", "binary_version": "5.8.2-1ubuntu3.fips.3.3.1" }, { "binary_name": "strongswan-charon", "binary_version": "5.8.2-1ubuntu3.fips.3.3.1" }, { "binary_name": "strongswan-charon-dbgsym", "binary_version": "5.8.2-1ubuntu3.fips.3.3.1" }, { "binary_name": "strongswan-hmac", "binary_version": "5.8.2-1ubuntu3.fips.3.3.1" }, { "binary_name": "strongswan-libcharon", "binary_version": "5.8.2-1ubuntu3.fips.3.3.1" }, { "binary_name": "strongswan-libcharon-dbgsym", "binary_version": "5.8.2-1ubuntu3.fips.3.3.1" }, { "binary_name": "strongswan-nm", "binary_version": "5.8.2-1ubuntu3.fips.3.3.1" }, { "binary_name": "strongswan-nm-dbgsym", "binary_version": "5.8.2-1ubuntu3.fips.3.3.1" }, { "binary_name": "strongswan-pki", "binary_version": "5.8.2-1ubuntu3.fips.3.3.1" }, { "binary_name": "strongswan-pki-dbgsym", "binary_version": "5.8.2-1ubuntu3.fips.3.3.1" }, { "binary_name": "strongswan-scepclient", "binary_version": "5.8.2-1ubuntu3.fips.3.3.1" }, { "binary_name": "strongswan-scepclient-dbgsym", "binary_version": "5.8.2-1ubuntu3.fips.3.3.1" }, { "binary_name": "strongswan-starter", "binary_version": "5.8.2-1ubuntu3.fips.3.3.1" }, { "binary_name": "strongswan-starter-dbgsym", "binary_version": "5.8.2-1ubuntu3.fips.3.3.1" }, { "binary_name": "strongswan-swanctl", "binary_version": "5.8.2-1ubuntu3.fips.3.3.1" }, { "binary_name": "strongswan-swanctl-dbgsym", "binary_version": "5.8.2-1ubuntu3.fips.3.3.1" }, { "binary_name": "strongswan-tnc-base", "binary_version": "5.8.2-1ubuntu3.fips.3.3.1" }, { "binary_name": "strongswan-tnc-client", "binary_version": "5.8.2-1ubuntu3.fips.3.3.1" }, { "binary_name": "strongswan-tnc-ifmap", "binary_version": "5.8.2-1ubuntu3.fips.3.3.1" }, { "binary_name": "strongswan-tnc-pdp", "binary_version": "5.8.2-1ubuntu3.fips.3.3.1" }, { "binary_name": "strongswan-tnc-server", "binary_version": "5.8.2-1ubuntu3.fips.3.3.1" } ], "ubuntu_priority": "medium" }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "charon-cmd", "binary_version": "5.9.1-1ubuntu3.1" }, { "binary_name": "charon-cmd-dbgsym", "binary_version": "5.9.1-1ubuntu3.1" }, { "binary_name": "charon-systemd", "binary_version": "5.9.1-1ubuntu3.1" }, { "binary_name": "charon-systemd-dbgsym", "binary_version": "5.9.1-1ubuntu3.1" }, { "binary_name": "libcharon-extauth-plugins", "binary_version": "5.9.1-1ubuntu3.1" }, { "binary_name": "libcharon-extauth-plugins-dbgsym", "binary_version": "5.9.1-1ubuntu3.1" }, { "binary_name": "libcharon-extra-plugins", "binary_version": "5.9.1-1ubuntu3.1" }, { "binary_name": "libcharon-extra-plugins-dbgsym", "binary_version": "5.9.1-1ubuntu3.1" }, { "binary_name": "libstrongswan", "binary_version": "5.9.1-1ubuntu3.1" }, { "binary_name": "libstrongswan-dbgsym", "binary_version": "5.9.1-1ubuntu3.1" }, { "binary_name": "libstrongswan-extra-plugins", "binary_version": "5.9.1-1ubuntu3.1" }, { "binary_name": "libstrongswan-extra-plugins-dbgsym", "binary_version": "5.9.1-1ubuntu3.1" }, { "binary_name": "libstrongswan-standard-plugins", "binary_version": "5.9.1-1ubuntu3.1" }, { "binary_name": "libstrongswan-standard-plugins-dbgsym", "binary_version": "5.9.1-1ubuntu3.1" }, { "binary_name": "strongswan", "binary_version": "5.9.1-1ubuntu3.1" }, { "binary_name": "strongswan-charon", "binary_version": "5.9.1-1ubuntu3.1" }, { "binary_name": "strongswan-charon-dbgsym", "binary_version": "5.9.1-1ubuntu3.1" }, { "binary_name": "strongswan-libcharon", "binary_version": "5.9.1-1ubuntu3.1" }, { "binary_name": "strongswan-libcharon-dbgsym", "binary_version": "5.9.1-1ubuntu3.1" }, { "binary_name": "strongswan-nm", "binary_version": "5.9.1-1ubuntu3.1" }, { "binary_name": "strongswan-nm-dbgsym", "binary_version": "5.9.1-1ubuntu3.1" }, { "binary_name": "strongswan-pki", "binary_version": "5.9.1-1ubuntu3.1" }, { "binary_name": "strongswan-pki-dbgsym", "binary_version": "5.9.1-1ubuntu3.1" }, { "binary_name": "strongswan-scepclient", "binary_version": "5.9.1-1ubuntu3.1" }, { "binary_name": "strongswan-scepclient-dbgsym", "binary_version": "5.9.1-1ubuntu3.1" }, { "binary_name": "strongswan-starter", "binary_version": "5.9.1-1ubuntu3.1" }, { "binary_name": "strongswan-starter-dbgsym", "binary_version": "5.9.1-1ubuntu3.1" }, { "binary_name": "strongswan-swanctl", "binary_version": "5.9.1-1ubuntu3.1" }, { "binary_name": "strongswan-swanctl-dbgsym", "binary_version": "5.9.1-1ubuntu3.1" } ], "ubuntu_priority": "medium" }