PT-2024-11905 · Unknown+2 · Strongswan+2

Jan Schermer · Published 2024-05-13 · Updated 2025-11-06 · CVE-2022-4967

Positive Technologies (AI Summary)

CVSS v3.1

7.7

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions strongSwan versions 5.9.2 through 5.9.5

Description The issue is related to authorization bypass through improper validation of certificates with host mismatch. When certificates are used to authenticate clients in TLS-based EAP methods, the IKE or EAP identity supplied by a client is not enforced to be contained in the client's certificate. This allows clients to authenticate with any trusted certificate and claim an arbitrary IKE/EAP identity as their own, which is problematic if the identity is used to make policy decisions.

Recommendations For strongSwan versions 5.9.2 through 5.9.5, update to version 5.9.6 or later to resolve the issue. As a temporary workaround, consider restricting the use of trusted certificates to minimize the risk of exploitation. Additionally, review and restrict any policy decisions based on IKE or EAP identities to prevent unauthorized access.

Fix

Related Identifiers

CVE-2022-4967

USN-6772-1

Affected Products

Linuxmint

Ubuntu

Strongswan

References · 18

• https://github.com/strongswan/strongswan/commit/e4b4aabc4996fc61c37deab7858d07bc4d220136 · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-4967 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-4967 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6772-1 · Vendor Advisory
• https://strongswan.org/blog/2024/05/13/strongswan-vulnerability-(cve-2022-4967).html · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-4967 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-4967 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-4967 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6772-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-4967 · Security Note
• https://ubuntu.com/security/CVE-2022-4967 · Vendor Advisory
• https://t.me/cveNotify/142010 · Telegram Post
• https://twitter.com/cracbot/status/1791710372950597778 · Twitter Post
• https://twitter.com/CVEnew/status/1789995182026346649 · Twitter Post
• https://twitter.com/oktsec/status/1809922687512219919 · Twitter Post