CVE-2021-41990 — Integer Overflow or Wraparound in Strongswan

CWE-190 — Integer Overflow or WraparoundCWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer9 documents8 sources
Severity
7.5HIGHNVD
EPSS
1.4%
top 19.66%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
6
StrongswanDebian StrongswanDebian Linux+3 more
Timeline
PublishedOct 18
Latest updateSep 16

Description

The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate with an RSASSA-PSS signature. For example, this can be triggered by an unrelated self-signed CA certificate sent by an initiator. Remote code execution cannot occur.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages6 packages

▶debiandebian/strongswan< strongswan 5.9.4-1 (bookworm)
▶NVDstrongswan/strongswan5.6.1 — 5.9.4
▶Debianstrongswan/strongswan< 5.9.1-1+deb11u1+3
▶Ubuntustrongswan/strongswan< 5.6.2-1ubuntu2.7+1

Also affects: Debian Linux 10.0, 11.0, Fedora 33, 34, 35

🔴Vulnerability Details

3
GHSA
GHSA-3wp5-cvp4-5h42: The gmp plugin in strongSwan before 5↗2022-05-24
▶
OSV
strongswan vulnerabilities↗2021-10-19
▶
OSV
CVE-2021-41990: The gmp plugin in strongSwan before 5↗2021-10-18
▶

📋Vendor Advisories

5
CISA ICS
Siemens SIMATIC NET CP, SINEMA, and SCALANCE↗2025-09-16
▶
Ubuntu
strongSwan vulnerabilities↗2021-10-19
▶
Red Hat
strongswan: gmp plugin: integer overflow via a crafted certificate with an RSASSA-PSS signature↗2021-10-18
▶
Microsoft
The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate with an RSASSA-PSS signature. For example this can be triggered by an unrelated self-signed CA certifi↗2021-10-12
▶
Debian
CVE-2021-41990: strongswan - The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a cr...↗2021
▶