PT-2021-7781 · Unknown+4 · Strongswan+4
Published
2021-10-18
·
Updated
2024-06-15
·
CVE-2021-41991
CVSS v2.0
7.8
High
| Vector | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
strongSwan versions prior to 5.9.4
Description
The issue is caused by a remote integer overflow in the in-memory certificate cache. This occurs when many requests with different certificates are received, filling the cache and later triggering the replacement of cache entries. The code attempts to select a less-often-used cache entry using a random number generator, but this is not done correctly. There is a slight possibility of remote code execution. The vulnerability can be exploited by a remote attacker to cause a denial of service.
Recommendations
For strongSwan versions prior to 5.9.4, update to version 5.9.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the in-memory certificate cache to minimize the risk of exploitation.
Exploit
Fix
RCE
DoS
Integer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Linuxmint
Suse
Ubuntu
Strongswan