Описание
The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests with different certificates to fill the cache and later trigger the replacement of cache entries. The code attempts to select a less-often-used cache entry by means of a random number generator, but this is not done correctly. Remote code execution might be a slight possibility.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 5.6.2-1ubuntu2.7 |
| devel | released | 5.9.1-1ubuntu3.1 |
| esm-infra-legacy/trusty | released | 5.1.2-0ubuntu2.11+esm1 |
| esm-infra/bionic | released | 5.6.2-1ubuntu2.7 |
| esm-infra/focal | released | 5.8.2-1ubuntu3.3 |
| esm-infra/xenial | released | 5.3.5-1ubuntu3.8+esm1 |
| fips-preview/jammy | released | 5.9.1-1ubuntu3.1 |
| fips-updates/bionic | released | 5.6.2-1ubuntu2.fips.2.7.1 |
| fips-updates/focal | released | 5.8.2-1ubuntu3.fips.3.3.1 |
| fips-updates/jammy | released | 5.9.1-1ubuntu3.1 |
Показывать по
EPSS
5 Medium
CVSS2
7.5 High
CVSS3
Связанные уязвимости
The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests with different certificates to fill the cache and later trigger the replacement of cache entries. The code attempts to select a less-often-used cache entry by means of a random number generator, but this is not done correctly. Remote code execution might be a slight possibility.
The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests with different certificates to fill the cache and later trigger the replacement of cache entries. The code attempts to select a less-often-used cache entry by means of a random number generator, but this is not done correctly. Remote code execution might be a slight possibility.
The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests with different certificates to fill the cache and later trigger the replacement of cache entries. The code attempts to select a less-often-used cache entry by means of a random number generator but this is not done correctly. Remote code execution might be a slight possibility.
The in-memory certificate cache in strongSwan before 5.9.4 has a remot ...
EPSS
5 Medium
CVSS2
7.5 High
CVSS3