PT-2018-3464 · Strongswan+3 · Strongswan+3
Publicado
2018-03-13
·
Atualizado
2024-06-15
·
CVE-2018-5388
CVSS v2.0
6.8
Média
| Vetor | AV:N/AC:L/Au:S/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions:
strongSwan versions prior to 5.6.3
Description:
The issue is caused by a buffer underflow in the stroke socket.c function of the strongSwan IPSEC daemon, due to a missing packet length check. This could allow a remote attacker to cause a denial of service, potentially leading to resource exhaustion.
Recommendations:
For strongSwan versions prior to 5.6.3, update to version 5.6.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the stroke socket.c function to minimize the risk of exploitation.
Correção
DoS
Memory Corruption
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Suse
Ubuntu
Strongswan