Описание
The gmp plugin in strongSwan before 5.5.3 does not properly validate RSA public keys before calling mpz_powm_sec, which allows remote peers to cause a denial of service (floating point exception and process crash) via a crafted certificate.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | released | 5.5.1-4ubuntu1 |
| esm-infra-legacy/trusty | not-affected | 5.1.2-0ubuntu2.6 |
| esm-infra/xenial | not-affected | 5.3.5-1ubuntu3.3 |
| precise/esm | DNE | |
| trusty | released | 5.1.2-0ubuntu2.6 |
| trusty/esm | not-affected | 5.1.2-0ubuntu2.6 |
| upstream | needs-triage | |
| vivid/stable-phone-overlay | DNE | |
| vivid/ubuntu-core | DNE | |
| xenial | released | 5.3.5-1ubuntu3.3 |
Показывать по
EPSS
5 Medium
CVSS2
7.5 High
CVSS3
Связанные уязвимости
The gmp plugin in strongSwan before 5.5.3 does not properly validate RSA public keys before calling mpz_powm_sec, which allows remote peers to cause a denial of service (floating point exception and process crash) via a crafted certificate.
The gmp plugin in strongSwan before 5.5.3 does not properly validate RSA public keys before calling mpz_powm_sec, which allows remote peers to cause a denial of service (floating point exception and process crash) via a crafted certificate.
The gmp plugin in strongSwan before 5.5.3 does not properly validate R ...
The gmp plugin in strongSwan before 5.5.3 does not properly validate RSA public keys before calling mpz_powm_sec, which allows remote peers to cause a denial of service (floating point exception and process crash) via a crafted certificate.
EPSS
5 Medium
CVSS2
7.5 High
CVSS3