Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2025:3904-1

Опубликовано: 01 нояб. 2025
Источник: suse-cvrf

Описание

Security update for strongswan

This update for strongswan fixes the following issues:

  • CVE-2025-62291: fixed buffer overflow when handling EAP-MSCHAPv2 failure requests (bsc#1251941)

Список пакетов

SUSE Linux Enterprise Server 12 SP5-LTSS
strongswan-5.1.3-26.29.1
strongswan-doc-5.1.3-26.29.1
strongswan-hmac-5.1.3-26.29.1
strongswan-ipsec-5.1.3-26.29.1
strongswan-libs0-5.1.3-26.29.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5
strongswan-5.1.3-26.29.1
strongswan-doc-5.1.3-26.29.1
strongswan-hmac-5.1.3-26.29.1
strongswan-ipsec-5.1.3-26.29.1
strongswan-libs0-5.1.3-26.29.1

Ссылки

Описание

In the eap-mschapv2 plugin (client-side) in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted message of size 6 through 8, and cause an integer underflow that potentially results in a heap-based buffer overflow.

Затронутые продукты
SUSE Linux Enterprise Server 12 SP5-LTSS:strongswan-5.1.3-26.29.1
SUSE Linux Enterprise Server 12 SP5-LTSS:strongswan-doc-5.1.3-26.29.1
SUSE Linux Enterprise Server 12 SP5-LTSS:strongswan-hmac-5.1.3-26.29.1
SUSE Linux Enterprise Server 12 SP5-LTSS:strongswan-ipsec-5.1.3-26.29.1
Ссылки