strongSwan before 5.9.12 has a buffer overflow and possible unauthenticated remote code execution via a DH public value that exceeds the internal buffer in charon-tkm's DH proxy. The earliest affected version is 5.3.0. An attack can occur via a crafted IKESAINIT message.
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "binaries": [ { "binary_name": "charon-cmd", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "charon-cmd-dbgsym", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "libcharon-extra-plugins", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "libcharon-extra-plugins-dbgsym", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "libstrongswan", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "libstrongswan-dbgsym", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "libstrongswan-extra-plugins", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "libstrongswan-extra-plugins-dbgsym", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "libstrongswan-standard-plugins", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "libstrongswan-standard-plugins-dbgsym", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-charon", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-charon-dbgsym", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-dbg", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-ike", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-ikev1", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-ikev2", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-libcharon", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-libcharon-dbgsym", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-nm", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-nm-dbgsym", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-plugin-af-alg", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-plugin-agent", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-plugin-attr-sql", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-plugin-certexpire", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-plugin-coupling", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-plugin-curl", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-plugin-dhcp", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-plugin-dnscert", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-plugin-dnskey", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-plugin-duplicheck", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-plugin-eap-aka", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-plugin-eap-aka-3gpp2", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-plugin-eap-dynamic", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-plugin-eap-gtc", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-plugin-eap-md5", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-plugin-eap-mschapv2", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-plugin-eap-peap", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-plugin-eap-radius", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-plugin-eap-sim", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-plugin-eap-sim-file", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-plugin-eap-sim-pcsc", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-plugin-eap-simaka-pseudonym", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-plugin-eap-simaka-reauth", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-plugin-eap-simaka-sql", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-plugin-eap-tls", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-plugin-eap-tnc", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-plugin-eap-ttls", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-plugin-error-notify", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-plugin-farp", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-plugin-fips-prf", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-plugin-gcrypt", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-plugin-gmp", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-plugin-ipseckey", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-plugin-kernel-libipsec", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-plugin-ldap", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-plugin-led", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-plugin-load-tester", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-plugin-lookip", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-plugin-mysql", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-plugin-ntru", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-plugin-openssl", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-plugin-pgp", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-plugin-pkcs11", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-plugin-pubkey", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-plugin-radattr", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-plugin-soup", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-plugin-sql", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-plugin-sqlite", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-plugin-sshkey", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-plugin-systime-fix", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-plugin-unbound", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-plugin-unity", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-plugin-whitelist", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-plugin-xauth-eap", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-plugin-xauth-generic", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-plugin-xauth-noauth", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-plugin-xauth-pam", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-starter", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-starter-dbgsym", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-tnc-base", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-tnc-base-dbgsym", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-tnc-client", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-tnc-client-dbgsym", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-tnc-ifmap", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-tnc-ifmap-dbgsym", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-tnc-pdp", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-tnc-pdp-dbgsym", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-tnc-server", "binary_version": "5.3.5-1ubuntu3.8+esm4" }, { "binary_name": "strongswan-tnc-server-dbgsym", "binary_version": "5.3.5-1ubuntu3.8+esm4" } ] }
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "binaries": [ { "binary_name": "charon-cmd", "binary_version": "5.6.2-1ubuntu2.9+esm1" }, { "binary_name": "charon-cmd-dbgsym", "binary_version": "5.6.2-1ubuntu2.9+esm1" }, { "binary_name": "charon-systemd", "binary_version": "5.6.2-1ubuntu2.9+esm1" }, { "binary_name": "charon-systemd-dbgsym", "binary_version": "5.6.2-1ubuntu2.9+esm1" }, { "binary_name": "libcharon-extra-plugins", "binary_version": "5.6.2-1ubuntu2.9+esm1" }, { "binary_name": "libcharon-extra-plugins-dbgsym", "binary_version": "5.6.2-1ubuntu2.9+esm1" }, { "binary_name": "libcharon-standard-plugins", "binary_version": "5.6.2-1ubuntu2.9+esm1" }, { "binary_name": "libcharon-standard-plugins-dbgsym", "binary_version": "5.6.2-1ubuntu2.9+esm1" }, { "binary_name": "libstrongswan", "binary_version": "5.6.2-1ubuntu2.9+esm1" }, { "binary_name": "libstrongswan-dbgsym", "binary_version": "5.6.2-1ubuntu2.9+esm1" }, { "binary_name": "libstrongswan-extra-plugins", "binary_version": "5.6.2-1ubuntu2.9+esm1" }, { "binary_name": "libstrongswan-extra-plugins-dbgsym", "binary_version": "5.6.2-1ubuntu2.9+esm1" }, { "binary_name": "libstrongswan-standard-plugins", "binary_version": "5.6.2-1ubuntu2.9+esm1" }, { "binary_name": "libstrongswan-standard-plugins-dbgsym", "binary_version": "5.6.2-1ubuntu2.9+esm1" }, { "binary_name": "strongswan", "binary_version": "5.6.2-1ubuntu2.9+esm1" }, { "binary_name": "strongswan-charon", "binary_version": "5.6.2-1ubuntu2.9+esm1" }, { "binary_name": "strongswan-charon-dbgsym", "binary_version": "5.6.2-1ubuntu2.9+esm1" }, { "binary_name": "strongswan-libcharon", "binary_version": "5.6.2-1ubuntu2.9+esm1" }, { "binary_name": "strongswan-libcharon-dbgsym", "binary_version": "5.6.2-1ubuntu2.9+esm1" }, { "binary_name": "strongswan-nm", "binary_version": "5.6.2-1ubuntu2.9+esm1" }, { "binary_name": "strongswan-nm-dbgsym", "binary_version": "5.6.2-1ubuntu2.9+esm1" }, { "binary_name": "strongswan-pki", "binary_version": "5.6.2-1ubuntu2.9+esm1" }, { "binary_name": "strongswan-pki-dbgsym", "binary_version": "5.6.2-1ubuntu2.9+esm1" }, { "binary_name": "strongswan-scepclient", "binary_version": "5.6.2-1ubuntu2.9+esm1" }, { "binary_name": "strongswan-scepclient-dbgsym", "binary_version": "5.6.2-1ubuntu2.9+esm1" }, { "binary_name": "strongswan-starter", "binary_version": "5.6.2-1ubuntu2.9+esm1" }, { "binary_name": "strongswan-starter-dbgsym", "binary_version": "5.6.2-1ubuntu2.9+esm1" }, { "binary_name": "strongswan-swanctl", "binary_version": "5.6.2-1ubuntu2.9+esm1" }, { "binary_name": "strongswan-swanctl-dbgsym", "binary_version": "5.6.2-1ubuntu2.9+esm1" }, { "binary_name": "strongswan-tnc-base", "binary_version": "5.6.2-1ubuntu2.9+esm1" }, { "binary_name": "strongswan-tnc-base-dbgsym", "binary_version": "5.6.2-1ubuntu2.9+esm1" }, { "binary_name": "strongswan-tnc-client", "binary_version": "5.6.2-1ubuntu2.9+esm1" }, { "binary_name": "strongswan-tnc-client-dbgsym", "binary_version": "5.6.2-1ubuntu2.9+esm1" }, { "binary_name": "strongswan-tnc-ifmap", "binary_version": "5.6.2-1ubuntu2.9+esm1" }, { "binary_name": "strongswan-tnc-ifmap-dbgsym", "binary_version": "5.6.2-1ubuntu2.9+esm1" }, { "binary_name": "strongswan-tnc-pdp", "binary_version": "5.6.2-1ubuntu2.9+esm1" }, { "binary_name": "strongswan-tnc-pdp-dbgsym", "binary_version": "5.6.2-1ubuntu2.9+esm1" }, { "binary_name": "strongswan-tnc-server", "binary_version": "5.6.2-1ubuntu2.9+esm1" }, { "binary_name": "strongswan-tnc-server-dbgsym", "binary_version": "5.6.2-1ubuntu2.9+esm1" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "charon-cmd", "binary_version": "5.8.2-1ubuntu3.6" }, { "binary_name": "charon-cmd-dbgsym", "binary_version": "5.8.2-1ubuntu3.6" }, { "binary_name": "charon-systemd", "binary_version": "5.8.2-1ubuntu3.6" }, { "binary_name": "charon-systemd-dbgsym", "binary_version": "5.8.2-1ubuntu3.6" }, { "binary_name": "libcharon-extauth-plugins", "binary_version": "5.8.2-1ubuntu3.6" }, { "binary_name": "libcharon-extauth-plugins-dbgsym", "binary_version": "5.8.2-1ubuntu3.6" }, { "binary_name": "libcharon-extra-plugins", "binary_version": "5.8.2-1ubuntu3.6" }, { "binary_name": "libcharon-extra-plugins-dbgsym", "binary_version": "5.8.2-1ubuntu3.6" }, { "binary_name": "libcharon-standard-plugins", "binary_version": "5.8.2-1ubuntu3.6" }, { "binary_name": "libstrongswan", "binary_version": "5.8.2-1ubuntu3.6" }, { "binary_name": "libstrongswan-dbgsym", "binary_version": "5.8.2-1ubuntu3.6" }, { "binary_name": "libstrongswan-extra-plugins", "binary_version": "5.8.2-1ubuntu3.6" }, { "binary_name": "libstrongswan-extra-plugins-dbgsym", "binary_version": "5.8.2-1ubuntu3.6" }, { "binary_name": "libstrongswan-standard-plugins", "binary_version": "5.8.2-1ubuntu3.6" }, { "binary_name": "libstrongswan-standard-plugins-dbgsym", "binary_version": "5.8.2-1ubuntu3.6" }, { "binary_name": "strongswan", "binary_version": "5.8.2-1ubuntu3.6" }, { "binary_name": "strongswan-charon", "binary_version": "5.8.2-1ubuntu3.6" }, { "binary_name": "strongswan-charon-dbgsym", "binary_version": "5.8.2-1ubuntu3.6" }, { "binary_name": "strongswan-libcharon", "binary_version": "5.8.2-1ubuntu3.6" }, { "binary_name": "strongswan-libcharon-dbgsym", "binary_version": "5.8.2-1ubuntu3.6" }, { "binary_name": "strongswan-nm", "binary_version": "5.8.2-1ubuntu3.6" }, { "binary_name": "strongswan-nm-dbgsym", "binary_version": "5.8.2-1ubuntu3.6" }, { "binary_name": "strongswan-pki", "binary_version": "5.8.2-1ubuntu3.6" }, { "binary_name": "strongswan-pki-dbgsym", "binary_version": "5.8.2-1ubuntu3.6" }, { "binary_name": "strongswan-scepclient", "binary_version": "5.8.2-1ubuntu3.6" }, { "binary_name": "strongswan-scepclient-dbgsym", "binary_version": "5.8.2-1ubuntu3.6" }, { "binary_name": "strongswan-starter", "binary_version": "5.8.2-1ubuntu3.6" }, { "binary_name": "strongswan-starter-dbgsym", "binary_version": "5.8.2-1ubuntu3.6" }, { "binary_name": "strongswan-swanctl", "binary_version": "5.8.2-1ubuntu3.6" }, { "binary_name": "strongswan-swanctl-dbgsym", "binary_version": "5.8.2-1ubuntu3.6" }, { "binary_name": "strongswan-tnc-base", "binary_version": "5.8.2-1ubuntu3.6" }, { "binary_name": "strongswan-tnc-client", "binary_version": "5.8.2-1ubuntu3.6" }, { "binary_name": "strongswan-tnc-ifmap", "binary_version": "5.8.2-1ubuntu3.6" }, { "binary_name": "strongswan-tnc-pdp", "binary_version": "5.8.2-1ubuntu3.6" }, { "binary_name": "strongswan-tnc-server", "binary_version": "5.8.2-1ubuntu3.6" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "charon-cmd", "binary_version": "5.9.5-2ubuntu2.2" }, { "binary_name": "charon-cmd-dbgsym", "binary_version": "5.9.5-2ubuntu2.2" }, { "binary_name": "charon-systemd", "binary_version": "5.9.5-2ubuntu2.2" }, { "binary_name": "charon-systemd-dbgsym", "binary_version": "5.9.5-2ubuntu2.2" }, { "binary_name": "libcharon-extauth-plugins", "binary_version": "5.9.5-2ubuntu2.2" }, { "binary_name": "libcharon-extauth-plugins-dbgsym", "binary_version": "5.9.5-2ubuntu2.2" }, { "binary_name": "libcharon-extra-plugins", "binary_version": "5.9.5-2ubuntu2.2" }, { "binary_name": "libcharon-extra-plugins-dbgsym", "binary_version": "5.9.5-2ubuntu2.2" }, { "binary_name": "libstrongswan", "binary_version": "5.9.5-2ubuntu2.2" }, { "binary_name": "libstrongswan-dbgsym", "binary_version": "5.9.5-2ubuntu2.2" }, { "binary_name": "libstrongswan-extra-plugins", "binary_version": "5.9.5-2ubuntu2.2" }, { "binary_name": "libstrongswan-extra-plugins-dbgsym", "binary_version": "5.9.5-2ubuntu2.2" }, { "binary_name": "libstrongswan-standard-plugins", "binary_version": "5.9.5-2ubuntu2.2" }, { "binary_name": "libstrongswan-standard-plugins-dbgsym", "binary_version": "5.9.5-2ubuntu2.2" }, { "binary_name": "strongswan", "binary_version": "5.9.5-2ubuntu2.2" }, { "binary_name": "strongswan-charon", "binary_version": "5.9.5-2ubuntu2.2" }, { "binary_name": "strongswan-charon-dbgsym", "binary_version": "5.9.5-2ubuntu2.2" }, { "binary_name": "strongswan-libcharon", "binary_version": "5.9.5-2ubuntu2.2" }, { "binary_name": "strongswan-libcharon-dbgsym", "binary_version": "5.9.5-2ubuntu2.2" }, { "binary_name": "strongswan-nm", "binary_version": "5.9.5-2ubuntu2.2" }, { "binary_name": "strongswan-nm-dbgsym", "binary_version": "5.9.5-2ubuntu2.2" }, { "binary_name": "strongswan-pki", "binary_version": "5.9.5-2ubuntu2.2" }, { "binary_name": "strongswan-pki-dbgsym", "binary_version": "5.9.5-2ubuntu2.2" }, { "binary_name": "strongswan-scepclient", "binary_version": "5.9.5-2ubuntu2.2" }, { "binary_name": "strongswan-scepclient-dbgsym", "binary_version": "5.9.5-2ubuntu2.2" }, { "binary_name": "strongswan-starter", "binary_version": "5.9.5-2ubuntu2.2" }, { "binary_name": "strongswan-starter-dbgsym", "binary_version": "5.9.5-2ubuntu2.2" }, { "binary_name": "strongswan-swanctl", "binary_version": "5.9.5-2ubuntu2.2" }, { "binary_name": "strongswan-swanctl-dbgsym", "binary_version": "5.9.5-2ubuntu2.2" } ] }