Description
In stroke_socket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer underflow, which may lead to resource exhaustion and denial of service while reading from the socket.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
strongSwan strongSwan
5.6.3 to < 5.6.3affected
References
- http://www.kb.cert.org/vuls/id/338343 ↗
- https://security.gentoo.org/glsa/201811-16 ↗
- https://git.strongswan.org/?p=strongswan.git%3Ba=commitdiff%3Bh=0acd1ab4 ↗
- http://www.securityfocus.com/bid/104263 ↗
- https://usn.ubuntu.com/3771-1/ ↗
- https://www.debian.org/security/2018/dsa-4229 ↗
- http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00077.html ↗
- http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00001.html ↗
- http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00047.html ↗
- http://packetstormsecurity.com/files/172833/strongSwan-VPN-Charon-Server-Buffer-Overflow.html ↗