CVE-2021-41990
Fixed in a distro release EPSS 7%
The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate with an RSASSA-PSS signature. For example, this can be triggered by an unrelated self-signed CA certificate sent by an initiator. Remote code execution cannot occur.
Products: strongswan, debian_linux, fedoraproject fedora, siemens 6gk6108-4am00-2ba2_firmware, siemens 6gk6108-4am00-2da2_firmware, siemens 6gk5804-0ap00-2aa2_firmware, siemens 6gk5812-1aa00-2aa2_firmware, siemens 6gk5812-1ba00-2aa2_firmware, siemens 6gk5816-1aa00-2aa2_firmware, siemens 6gk5816-1ba00-2aa2_firmware, siemens 6gk5826-2ab00-2ab2_firmware, siemens 6gk5874-2aa00-2aa2_firmware, siemens 6gk5874-3aa00-2aa2_firmware, siemens 6gk5876-3aa02-2ba2_firmware, siemens 6gk5876-3aa02-2ea2_firmware, siemens 6gk5876-4aa00-2ba2_firmware, siemens 6gk5876-4aa00-2da2_firmware, siemens 6gk5856-2ea00-3da1_firmware, siemens 6gk5856-2ea00-3aa1_firmware, siemens 6gk5615-0aa00-2aa2_firmware
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.12 | strongswan | 5.8.4-r3 |
| Alpine 3.13 | strongswan | 5.9.1-r1 |
| Alpine 3.14 | strongswan | 5.9.1-r2 |
| Alpine 3.15 | strongswan | 5.9.1-r3 |
| Alpine 3.16 | strongswan | 5.9.1-r3 |
| Alpine 3.17 | strongswan | 5.9.1-r3 |
| Alpine 3.18 | strongswan | 5.9.1-r3 |
| Alpine 3.19 | strongswan | 5.9.1-r3 |
| Alpine 3.20 | strongswan | 5.9.1-r3 |
| Alpine 3.21 | strongswan | 5.9.1-r3 |
| Alpine 3.22 | strongswan | 5.9.1-r3 |
| Alpine 3.23 | strongswan | 5.9.1-r3 |
| Alpine 3.24 | strongswan | 5.9.1-r3 |
| Arch Linux | strongswan | 5.9.4-1 |
| Debian 10 | strongswan | 5.7.2-1+deb10u1 |
| Debian 11 | strongswan | 5.9.1-1+deb11u1 |
| Debian 12 | strongswan | 5.9.4-1 |
| Debian 13 | strongswan | 5.9.4-1 |
| Debian 14 | strongswan | 5.9.4-1 |
| SUSE Enterprise Storage 6 | strongswan | 5.8.2-4.14.2 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS | strongswan | 5.8.2-4.14.2 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | strongswan | 5.8.2-4.14.2 |
| SUSE Linux Enterprise High Performance Computing 15-ESPOS | strongswan | 5.8.2-4.14.2 |
| SUSE Linux Enterprise High Performance Computing 15-LTSS | strongswan | 5.8.2-4.14.2 |
| SUSE Linux Enterprise Module for Basesystem 15 SP2 | strongswan | 5.8.2-11.21.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP3 | strongswan | 5.8.2-11.21.1 |
| SUSE Linux Enterprise Module for Package Hub 15 SP2 | strongswan | 5.8.2-11.21.1 |
| SUSE Linux Enterprise Module for Package Hub 15 SP3 | strongswan | 5.8.2-11.21.1 |
| SUSE Linux Enterprise Server 15 SP1-BCL | strongswan | 5.8.2-4.14.2 |
| SUSE Linux Enterprise Server 15 SP1-LTSS | strongswan | 5.8.2-4.14.2 |
| SUSE Linux Enterprise Server 15-LTSS | strongswan | 5.8.2-4.14.2 |
| SUSE Linux Enterprise Server for SAP Applications 15 | strongswan | 5.8.2-4.14.2 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP1 | strongswan | 5.8.2-4.14.2 |
| SUSE Linux Enterprise Workstation Extension 15 SP2 | strongswan | 5.8.2-11.21.1 |
| SUSE Linux Enterprise Workstation Extension 15 SP3 | strongswan | 5.8.2-11.21.1 |
| Ubuntu 18.04 LTS | strongswan | 5.6.2-1ubuntu2.7 |
| Ubuntu 20.04 LTS | strongswan | 5.8.2-1ubuntu3.3 |
| Ubuntu 22.04 LTS | strongswan | 5.9.1-1ubuntu3.1 |
| Ubuntu Pro FIPS-updates 18.04 LTS | strongswan | 5.6.2-1ubuntu2.fips.2.7.1 |
| Ubuntu Pro FIPS-updates 20.04 LTS | strongswan | 5.8.2-1ubuntu3.fips.3.3.1 |
| Ubuntu Pro FIPS 18.04 LTS | strongswan | no fix |
| Ubuntu Pro FIPS 20.04 LTS | strongswan | no fix |
| openSUSE Leap 15.2 | strongswan | 5.8.2-lp152.2.18.1 |
| openSUSE Leap 15.3 | strongswan | 5.8.2-11.21.1 |
| openSUSE Tumbleweed | strongswan | 5.9.4-1.1 |