Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 526
Alerts This Week
Warning Icon 1 526

Debian 7: DLA-1059-1 Moderate: Strongswan DoS Vulnerability

debian lts
Calendar Grey August 18, 2017
Scroller Debian Lts
Important security flaw resolved in strongswan VPN application for Debian Wheezy. It is advised to update promptly.
It was discovered that there was a denial-of-service vulnerability in the Strongswan Virtual Private Network (VPN) software
Topics%20covered

Topics Covered

security advisory moderate software update Debian VPN denial-of-service strongswan

Summary

Specific RSA signatures passed to the gmp plugin for verification could
cause a null-pointer dereference. Potential triggers are signatures in
certificates, but also signatures used during IKE authentication.

For more details, please see:




For Debian 7 "Wheezy", this issue has been fixed in strongswan version
4.5.2-1.5+deb7u10.

We recommend that you upgrade your strongswan packages.


Regards,

- --
,'`.
: :' : Chris Lamb
`. `'` lamby@debian.org / chris-lamb.co.uk
`-



Severity
important
Lowest
Low
Medium
High
Critical

Package: strongswan
Version: 4.5.2-1.5+deb7u10
CVE ID: CVE-2017-11185
Debian Bug: #872155

Topics%20covered

Topics Covered

security advisory moderate software update Debian VPN denial-of-service strongswan

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.