CVE-2022-40617
Fixed in a distro release EPSS 2%CVSS 7.5
strongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation plugin by sending a crafted end-entity (and intermediate CA) certificate that contains a CRL/OCSP URL that points to a server (under the attacker's control) that doesn't properly respond but (for example) just does nothing after the initial TCP handshake, or sends an excessive amount of application data.
Products: strongswan, canonical ubuntu_linux, debian_linux, fedoraproject fedora, stormshield_network_security
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.13 | strongswan | 5.9.1-r2 |
| Alpine 3.14 | strongswan | 5.9.1-r3 |
| Alpine 3.15 | strongswan | 5.9.1-r4 |
| Alpine 3.16 | strongswan | 5.9.5-r2 |
| Alpine 3.17 | strongswan | 5.9.8-r0 |
| Alpine 3.18 | strongswan | 5.9.8-r0 |
| Alpine 3.19 | strongswan | 5.9.8-r0 |
| Alpine 3.20 | strongswan | 5.9.8-r0 |
| Alpine 3.21 | strongswan | 5.9.8-r0 |
| Alpine 3.22 | strongswan | 5.9.8-r0 |
| Alpine 3.23 | strongswan | 5.9.8-r0 |
| Alpine 3.24 | strongswan | 5.9.8-r0 |
| Arch Linux | strongswan | 5.9.8-1 |
| Debian 10 | strongswan | 5.7.2-1+deb10u3 |
| Debian 11 | strongswan | 5.9.1-1+deb11u3 |
| Debian 12 | strongswan | 5.9.8-1 |
| Debian 13 | strongswan | 5.9.8-1 |
| Debian 14 | strongswan | 5.9.8-1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP3 | strongswan | 5.8.2-150200.11.30.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP4 | strongswan | 5.8.2-150400.19.3.3 |
| SUSE Linux Enterprise Module for Package Hub 15 SP3 | strongswan | 5.8.2-150200.11.30.1 |
| SUSE Linux Enterprise Module for Package Hub 15 SP4 | strongswan | 5.8.2-150400.19.3.3 |
| SUSE Linux Enterprise Server 12 SP5 | strongswan | 5.1.3-26.23.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | strongswan | 5.1.3-26.23.1 |
| SUSE Linux Enterprise Workstation Extension 15 SP3 | strongswan | 5.8.2-150200.11.30.1 |
| SUSE Linux Enterprise Workstation Extension 15 SP4 | strongswan | 5.8.2-150400.19.3.3 |
| Ubuntu 18.04 LTS | strongswan | 5.6.2-1ubuntu2.9 |
| Ubuntu 20.04 LTS | strongswan | 5.8.2-1ubuntu3.5 |
| Ubuntu 22.04 LTS | strongswan | 5.9.5-2ubuntu2.1 |
| Ubuntu Pro 14.04 LTS | strongswan | 5.1.2-0ubuntu2.11+esm3 |
| Ubuntu Pro 16.04 LTS | strongswan | 5.3.5-1ubuntu3.8+esm3 |
| Ubuntu Pro FIPS-updates 16.04 LTS | strongswan | 5.3.5-1ubuntu3.fips.3.8.6 |
| Ubuntu Pro FIPS-updates 18.04 LTS | strongswan | 5.6.2-1ubuntu2.fips.2.9 |
| Ubuntu Pro FIPS-updates 20.04 LTS | strongswan | 5.8.2-1ubuntu3.fips.3.5 |
| Ubuntu Pro FIPS 16.04 LTS | strongswan | no fix |
| Ubuntu Pro FIPS 18.04 LTS | strongswan | no fix |
| Ubuntu Pro FIPS 20.04 LTS | strongswan | no fix |
| openSUSE Leap 15.3 | strongswan | 5.8.2-150200.11.30.1 |
| openSUSE Leap 15.4 | strongswan | 5.8.2-150400.19.3.3 |