PT-2025-44223 · Unknown+3 · Charon-Systemd+16

Publicado 2025-01-01 · Atualizado 2026-01-22 · CVE-2025-62291

Positive Technologies (AI Summary) · Pt

CVSS v3.1

8.1

Alta

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Nome do Software Vulnerável e Versões Afetadas Versões do strongSwan 5.9.13-2ubuntu4.25.04.1

Descrição O cliente strongSwan apresentava um tratamento incorreto de solicitações de falha EAP-MSCHAPv2. Um atacante poderia potencialmente causar uma negação de serviço, ou possivelmente executar código arbitrário, induzindo um usuário ou sistema automatizado a se conectar a um servidor malicioso.

Recomendações Execute sudo pro fix USN-7841-1 para corrigir a vulnerabilidade. Atualize para as seguintes versões dos pacotes: charon-cmd - 5.9.13-2ubuntu4.25.04.1 charon-systemd - 5.9.13-2ubuntu4.25.04.1 libcharon-extauth-plugins - 5.9.13-2ubuntu4.25.04.1 libcharon-extra-plugins - 5.9.13-2ubuntu4.25.04.1 libstrongswan - 5.9.13-2ubuntu4.25.04.1 libstrongswan-extra-plugins - 5.9.13-2ubuntu4.25.04.1 libstrongswan-standard-plugins - 5.9.13-2ubuntu4.25.04.1 strongswan - 5.9.13-2ubuntu4.25.04.1 strongswan-charon - 5.9.13-2ubuntu4.25.04.1 strongswan-libcharon - 5.9.13-2ubuntu4.25.04.1 strongswan-nm - 5.9.13-2ubuntu4.25.04.1 strongswan-pki - 5.9.13-2ubuntu4.25.04.1 strongswan-starter - 5.9.13-2ubuntu4.25.04.1 strongswan-swanctl - 5.9.13-2ubuntu4.25.04.1

Correção

DoS

Integer Underflow

Heap Based Buffer Overflow

Enumeração de Fraquezas

CWE-191

CWE-122

Identificadores relacionados

AZL-74660

AZL-74766

BDU:2026-02400

CVE-2025-62291

DLA-4359-1

DSA-6041-1

MGASA-2025-0272

OPENSUSE-SU-2025:15681-1

OPENSUSE-SU-2025:20132-1

SUSE-SU-2025:21167-1

SUSE-SU-2025:3834-1

SUSE-SU-2025:3855-1

SUSE-SU-2025:3856-1

SUSE-SU-2025:3857-1

SUSE-SU-2025:3873-1

SUSE-SU-2025:3904-1

SUSE-SU-2025_21167-1

SUSE-SU-2025_3834-1

SUSE-SU-2025_3855-1

SUSE-SU-2025_3856-1

SUSE-SU-2025_3857-1

SUSE-SU-2025_3873-1

SUSE-SU-2025_3904-1

USN-7841-1

Produtos afetados

Linuxmint

Red Os

Ubuntu

Charon-Cmd

Charon-Systemd

Libcharon-Extauth-Plugins

Libcharon-Extra-Plugins

Libstrongswan

Libstrongswan-Extra-Plugins

Libstrongswan-Standard-Plugins

Strongswan

Strongswan-Charon

Strongswan-Libcharon

Strongswan-Nm

Strongswan-Pki

Strongswan-Starter

Strongswan-Swanctl

Referências · 57

• https://github.com/strongswan/strongswan/releases · Nota
• https://github.com/strongswan/strongswan/commits/master/src/libcharon/plugins/eap_mschapv2 · Nota
• https://suse.com/support/update/announcement/2025/suse-su-202521167-1 · Nota
• https://osv.dev/vulnerability/SUSE-SU-2025:3857-1 · Aviso do Fabricante
• https://suse.com/support/update/announcement/2025/suse-su-20253857-1 · Nota
• https://osv.dev/vulnerability/CVE-2025-62291 · Aviso do Fabricante
• https://bugzilla.suse.com/1251941 · Nota
• https://osv.dev/vulnerability/USN-7841-1 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-7841-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2025-62291 · Nota
• https://security-tracker.debian.org/tracker/CVE-2025-62291 · Aviso do Fabricante
• https://osv.dev/vulnerability/AZL-74660 · Aviso do Fabricante
• http://repo.red-soft.ru/redos/8.0/x86_64/updates · Aviso do Fabricante
• https://osv.dev/vulnerability/DSA-6041-1 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/2012303264180748719 · Publicação no Twitter