Published: 18/10/2021 Updated: 07/11/2023

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

The in-memory certificate cache in strongSwan prior to 5.9.4 has a remote integer overflow upon receiving many requests with different certificates to fill the cache and later trigger the replacement of cache entries. The code attempts to select a less-often-used cache entry by means of a random number generator, but this is not done correctly. Remote code execution might be a slight possibility.

Vulnerable Product	Search on Vulmon	Subscribe to Product
strongswan strongswan
debian debian linux 9.0
debian debian linux 10.0
debian debian linux 11.0
fedoraproject fedora 33
fedoraproject fedora 34
fedoraproject fedora 35
siemens sinema remote connect server -
siemens siplus_et_200sp_cp_1542sp-1_irc_tx_rail_firmware -
siemens simatic_cp_1243-1_firmware -
siemens simatic_cp_1242-7_gprs_v2_firmware -
siemens simatic_net_cp_1243-8_irc_firmware -
siemens scalance_sc632-2c_firmware -
siemens siplus_et_200sp_cp_1543sp-1_isec_firmware -
siemens cp_1543-1_firmware -
siemens simatic_net_cp_1545-1_firmware -
siemens simatic_cp_1543sp-1_firmware -
siemens simatic_net_cp1243-7_lte_eu_firmware -
siemens simatic_cp_1243-7_lte\\/us_firmware -
siemens simatic_cp_1542sp-1_firmware -
siemens scalance_sc636-2c_firmware -
siemens simatic_cp_1542sp-1_irc_firmware -
siemens scalance_sc642-2c_firmware -
siemens scalance_sc646-2c_firmware
siemens scalance_sc622-2c_firmware -
siemens siplus_s7-1200_cp_1243-1_rail_firmware -
siemens siplus_s7-1200_cp_1243-1_firmware -
siemens siplus_net_cp_1543-1_firmware -
siemens siplus_et_200sp_cp_1543sp-1_isec_tx_rail_firmware -

Researchers at the United States of America National Security Agency (NSA) identified two denial of services vulnerability in strongSwan, an IKE/IPsec suite CVE-2021-41990 RSASSA-PSS signatures whose parameters define a very high salt length can trigger an integer overflow that can lead to a segmentation fault Generating a signature ...

The in-memory certificate cache in strongSwan before 594 has a remote integer overflow upon receiving many requests with different certificates to fill the cache and later trigger the replacement of cache entries The code attempts to select a less-often-used cache entry by means of a random number generator, but this is not done correctly Remot ...

CWE-190 https://github.com/strongswan/strongswan/releases/tag/5.9.4 https://www.debian.org/security/2021/dsa-4989 https://lists.debian.org/debian-lts-announce/2021/10/msg00014.html https://cert-portal.siemens.com/productcert/pdf/ssa-539476.pdf https://www.strongswan.org/blog/2021/10/18/strongswan-vulnerability-%28cve-2021-41991%29.html https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5FJSATD2R2XHTG4P63GCMQ2N7EWKMME5/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WQSQ3BEC22NF4NCDZVCT4P3Q2ZIAJXGJ/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3TQ32JLJOBJDB2EJKSX2PBPB5NFG2D4/https://nvd.nist.gov https://www.debian.org/security/2021/dsa-4989

CVE-2021-41991

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect