strongswan-5.3.5-1.1 on GA media SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2024:10579-1 Final 1 1 2024-06-15T00:00:00Z current 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z strongswan-5.3.5-1.1 on GA media These are all security issues fixed in the strongswan-5.3.5-1.1 package on the GA media of openSUSE Tumbleweed. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). openSUSE-Tumbleweed-2024-10579 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/security/rating/ SUSE Security Ratings https://www.suse.com/security/cve/CVE-2009-0790/ SUSE CVE CVE-2009-0790 page https://www.suse.com/security/cve/CVE-2012-2388/ SUSE CVE CVE-2012-2388 page https://www.suse.com/security/cve/CVE-2013-2944/ SUSE CVE CVE-2013-2944 page https://www.suse.com/security/cve/CVE-2013-5018/ SUSE CVE CVE-2013-5018 page https://www.suse.com/security/cve/CVE-2013-6075/ SUSE CVE CVE-2013-6075 page https://www.suse.com/security/cve/CVE-2013-6076/ SUSE CVE CVE-2013-6076 page https://www.suse.com/security/cve/CVE-2014-2338/ SUSE CVE CVE-2014-2338 page https://www.suse.com/security/cve/CVE-2014-9221/ SUSE CVE CVE-2014-9221 page https://www.suse.com/security/cve/CVE-2015-3991/ SUSE CVE CVE-2015-3991 page https://www.suse.com/security/cve/CVE-2015-4171/ SUSE CVE CVE-2015-4171 page https://www.suse.com/security/cve/CVE-2015-8023/ SUSE CVE CVE-2015-8023 page openSUSE Tumbleweed strongswan-5.3.5-1.1 strongswan-doc-5.3.5-1.1 strongswan-hmac-5.3.5-1.1 strongswan-ipsec-5.3.5-1.1 strongswan-libs0-5.3.5-1.1 strongswan-mysql-5.3.5-1.1 strongswan-nm-5.3.5-1.1 strongswan-sqlite-5.3.5-1.1 strongswan-5.3.5-1.1 as a component of openSUSE Tumbleweed strongswan-doc-5.3.5-1.1 as a component of openSUSE Tumbleweed strongswan-hmac-5.3.5-1.1 as a component of openSUSE Tumbleweed strongswan-ipsec-5.3.5-1.1 as a component of openSUSE Tumbleweed strongswan-libs0-5.3.5-1.1 as a component of openSUSE Tumbleweed strongswan-mysql-5.3.5-1.1 as a component of openSUSE Tumbleweed strongswan-nm-5.3.5-1.1 as a component of openSUSE Tumbleweed strongswan-sqlite-5.3.5-1.1 as a component of openSUSE Tumbleweed The pluto IKE daemon in Openswan and Strongswan IPsec 2.6 before 2.6.21 and 2.4 before 2.4.14, and Strongswan 4.2 before 4.2.14 and 2.8 before 2.8.9, allows remote attackers to cause a denial of service (daemon crash and restart) via a crafted (1) R_U_THERE or (2) R_U_THERE_ACK Dead Peer Detection (DPD) IPsec IKE Notification message that triggers a NULL pointer dereference related to inconsistent ISAKMP state and the lack of a phase2 state association in DPD. CVE-2009-0790 openSUSE Tumbleweed:strongswan-5.3.5-1.1 openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1 openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1 openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1 openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1 openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1 openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1 openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2009-0790.html CVE-2009-0790 https://bugzilla.suse.com/487762 SUSE Bug 487762 The GMP Plugin in strongSwan 4.2.0 through 4.6.3 allows remote attackers to bypass authentication via a (1) empty or (2) zeroed RSA signature, aka "RSA signature verification vulnerability." CVE-2012-2388 openSUSE Tumbleweed:strongswan-5.3.5-1.1 openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1 openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1 openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1 openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1 openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1 openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1 openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1 moderate 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2012-2388.html CVE-2012-2388 https://bugzilla.suse.com/1107874 SUSE Bug 1107874 https://bugzilla.suse.com/761325 SUSE Bug 761325 https://bugzilla.suse.com/815236 SUSE Bug 815236 strongSwan 4.3.5 through 5.0.3, when using the OpenSSL plugin for ECDSA signature verification, allows remote attackers to authenticate as other users via an invalid signature. CVE-2013-2944 openSUSE Tumbleweed:strongswan-5.3.5-1.1 openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1 openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1 openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1 openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1 openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1 openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1 openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1 moderate 4.9 AV:N/AC:M/Au:S/C:P/I:P/A:N 4.9 AV:N/AC:M/Au:S/C:P/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-2944.html CVE-2013-2944 https://bugzilla.suse.com/815236 SUSE Bug 815236 The is_asn1 function in strongSwan 4.1.11 through 5.0.4 does not properly validate the return value of the asn1_length function, which allows remote attackers to cause a denial of service (segmentation fault) via a (1) XAuth username, (2) EAP identity, or (3) PEM encoded file that starts with a 0x04, 0x30, or 0x31 character followed by an ASN.1 length value that triggers an integer overflow. CVE-2013-5018 openSUSE Tumbleweed:strongswan-5.3.5-1.1 openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1 openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1 openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1 openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1 openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1 openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1 openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-5018.html CVE-2013-5018 https://bugzilla.suse.com/833278 SUSE Bug 833278 The compare_dn function in utils/identification.c in strongSwan 4.3.3 through 5.1.1 allows (1) remote attackers to cause a denial of service (out-of-bounds read, NULL pointer dereference, and daemon crash) or (2) remote authenticated users to impersonate arbitrary users and bypass access restrictions via a crafted ID_DER_ASN1_DN ID, related to an "insufficient length check" during identity comparison. CVE-2013-6075 openSUSE Tumbleweed:strongswan-5.3.5-1.1 openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1 openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1 openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1 openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1 openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1 openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1 openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-6075.html CVE-2013-6075 https://bugzilla.suse.com/847506 SUSE Bug 847506 strongSwan 5.0.2 through 5.1.0 allows remote attackers to cause a denial of service (NULL pointer dereference and charon daemon crash) via a crafted IKEv1 fragmentation packet. CVE-2013-6076 openSUSE Tumbleweed:strongswan-5.3.5-1.1 openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1 openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1 openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1 openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1 openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1 openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1 openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-6076.html CVE-2013-6076 https://bugzilla.suse.com/847509 SUSE Bug 847509 IKEv2 in strongSwan 4.0.7 before 5.1.3 allows remote attackers to bypass authentication by rekeying an IKE_SA during (1) initiation or (2) re-authentication, which triggers the IKE_SA state to be set to established. CVE-2014-2338 openSUSE Tumbleweed:strongswan-5.3.5-1.1 openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1 openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1 openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1 openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1 openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1 openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1 openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1 moderate 6.4 AV:N/AC:L/Au:N/C:P/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-2338.html CVE-2014-2338 https://bugzilla.suse.com/870572 SUSE Bug 870572 strongSwan 4.5.x through 5.2.x before 5.2.1 allows remote attackers to cause a denial of service (invalid pointer dereference) via a crafted IKEv2 Key Exchange (KE) message with Diffie-Hellman (DH) group 1025. CVE-2014-9221 openSUSE Tumbleweed:strongswan-5.3.5-1.1 openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1 openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1 openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1 openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1 openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1 openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1 openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-9221.html CVE-2014-9221 https://bugzilla.suse.com/910491 SUSE Bug 910491 strongSwan 5.2.2 and 5.3.0 allows remote attackers to cause a denial of service (daemon crash) or execute arbitrary code. CVE-2015-3991 openSUSE Tumbleweed:strongswan-5.3.5-1.1 openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1 openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1 openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1 openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1 openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1 openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1 openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1 moderate 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2015-3991.html CVE-2015-3991 https://bugzilla.suse.com/931272 SUSE Bug 931272 strongSwan 4.3.0 through 5.x before 5.3.2 and strongSwan VPN Client before 1.4.6, when using EAP or pre-shared keys for authenticating an IKEv2 connection, does not enforce server authentication restrictions until the entire authentication process is complete, which allows remote servers to obtain credentials by using a valid certificate and then reading the responses. CVE-2015-4171 openSUSE Tumbleweed:strongswan-5.3.5-1.1 openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1 openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1 openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1 openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1 openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1 openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1 openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1 low 2.6 AV:N/AC:H/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2015-4171.html CVE-2015-4171 https://bugzilla.suse.com/931845 SUSE Bug 931845 https://bugzilla.suse.com/933591 SUSE Bug 933591 The server implementation of the EAP-MSCHAPv2 protocol in the eap-mschapv2 plugin in strongSwan 4.2.12 through 5.x before 5.3.4 does not properly validate local state, which allows remote attackers to bypass authentication via an empty Success message in response to an initial Challenge message. CVE-2015-8023 openSUSE Tumbleweed:strongswan-5.3.5-1.1 openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1 openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1 openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1 openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1 openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1 openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1 openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1 important 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P 5 AV:N/AC:L/Au:N/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2015-8023.html CVE-2015-8023 https://bugzilla.suse.com/953817 SUSE Bug 953817