CVE-2022-40617
published 2022-10-31CVE-2022-40617: strongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation plugin by sending a crafted end-entity (and intermediate CA)…
PriorityP339high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
1.75%
77.7th percentile
strongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation plugin by sending a crafted end-entity (and intermediate CA) certificate that contains a CRL/OCSP URL that points to a server (under the attacker's control) that doesn't properly respond but (for example) just does nothing after the initial TCP handshake, or sends an excessive amount of application data.
Affected
21 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| debian | strongswan | < strongswan 5.9.8-1 (bookworm) | strongswan 5.9.8-1 (bookworm) |
| fedoraproject | fedora | — | — |
| msrc | cbl2_strongswan_5.9.8-1_on_cbl_mariner_2.0 | — | — |
| msrc | cbl_mariner_2.0_arm | — | — |
| msrc | cbl_mariner_2.0_x64 | — | — |
| msrc | cm1_strongswan_5.7.2-6_on_cbl_mariner_1.0 | — | — |
| stormshield | stormshield_network_security | >= 3.11.1 < 3.11.20 | 3.11.20 |
| stormshield | stormshield_network_security | >= 4.3.1 < 4.3.15 | 4.3.15 |
| stormshield | stormshield_network_security | >= 4.5.1 < 4.6.0 | 4.6.0 |
| strongswan | strongswan | < 5.9.8 | 5.9.8 |
| strongswan | strongswan | >= 0 < 5.9.1-1+deb11u3 | 5.9.1-1+deb11u3 |
| strongswan | strongswan | >= 0 < 5.9.8-1 | 5.9.8-1 |
| strongswan | strongswan | >= 0 < 5.9.8-1 | 5.9.8-1 |
| strongswan | strongswan | >= 0 < 5.9.8-1 | 5.9.8-1 |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
osv7.5HIGH
vendor_debian7.5HIGH
vendor_msrc7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Microsoft
strongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation plugin by sending a crafted end-entity (and intermediate CA) certificate that contains a CRL/OCSP URL tha
vendor_msrc·2022-10-11·CVSS 7.5
CVE-2022-40617 [HIGH] CWE-400 strongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation plugin by sending a crafted end-entity (and intermediate CA) certificate that contains a CRL/OCSP URL tha
strongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation plugin by sending a crafted end-entity (and intermediate CA) certificate that contains a CRL/OCSP URL that points to a server (under the attacker's control) that doesn't properly respond but (for example) just does nothing after the initial TCP handshake or sends an excessive amount of application data.
FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?
One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is commit
Ubuntu
strongSwan vulnerability
vendor_ubuntu·2022-10-03
CVE-2022-40617 strongSwan vulnerability
Title: strongSwan vulnerability
Summary: strongSwan could be made do denial of service if it received
a specially crafted certificate.
USN-5651-1 fixed a vulnerability in strongSwan. This update provides
the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.
Original advisory details:
Lahav Schlesinger discovered that strongSwan incorrectly handled certain OCSP URIs and
and CRL distribution points (CDP) in certificates. A remote attacker could
possibly use this issue to initiate IKE_SAs and send crafted certificates
that contain URIs pointing to servers under their control, which can lead
to a denial-of-service attack.
Instructions: In general, a standard system update will make all the necessary changes.
Ubuntu
strongSwan vulnerability
vendor_ubuntu·2022-10-03
CVE-2022-40617 strongSwan vulnerability
Title: strongSwan vulnerability
Summary: strongSwan could be made do denial of service if it received
a specially crafted certificate.
Lahav Schlesinger discovered that strongSwan incorrectly handled certain OCSP URIs and
and CRL distribution points (CDP) in certificates. A remote attacker could
possibly use this issue to initiate IKE_SAs and send crafted certificates
that contain URIs pointing to servers under their control, which can lead
to a denial-of-service attack.
Instructions: In general, a standard system update will make all the necessary changes.
Debian
CVE-2022-40617: strongswan - strongSwan before 5.9.8 allows remote attackers to cause a denial of service in ...
vendor_debian·2022·CVSS 7.5
CVE-2022-40617 [HIGH] CVE-2022-40617: strongswan - strongSwan before 5.9.8 allows remote attackers to cause a denial of service in ...
strongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation plugin by sending a crafted end-entity (and intermediate CA) certificate that contains a CRL/OCSP URL that points to a server (under the attacker's control) that doesn't properly respond but (for example) just does nothing after the initial TCP handshake, or sends an excessive amount of application data.
Scope: local
bookworm: resolved (fixed in 5.9.8-1)
bullseye: resolved (fixed in 5.9.1-1+deb11u3)
forky: resolved (fixed in 5.9.8-1)
sid: resolved (fixed in 5.9.8-1)
trixie: resolved (fixed in 5.9.8-1)
OSV
CVE-2022-40617: strongSwan before 5
osv·2022-10-31·CVSS 7.5
CVE-2022-40617 [HIGH] CVE-2022-40617: strongSwan before 5
strongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation plugin by sending a crafted end-entity (and intermediate CA) certificate that contains a CRL/OCSP URL that points to a server (under the attacker's control) that doesn't properly respond but (for example) just does nothing after the initial TCP handshake, or sends an excessive amount of application data.
GHSA
GHSA-f2x8-4jwf-gqrg: strongSwan before 5
ghsa_unreviewed·2022-10-31
CVE-2022-40617 [HIGH] CWE-400 GHSA-f2x8-4jwf-gqrg: strongSwan before 5
strongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation plugin by sending a crafted end-entity (and intermediate CA) certificate that contains a CRL/OCSP URL that points to a server (under the attacker's control) that doesn't properly respond but (for example) just does nothing after the initial TCP handshake, or sends an excessive amount of application data.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J3GAYIOCSLU57C45CO4UE4IV4JZE4W3L/https://www.strongswan.org/blog/2022/10/03/strongswan-vulnerability-%28cve-2022-40617%29.htmlhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J3GAYIOCSLU57C45CO4UE4IV4JZE4W3L/https://www.strongswan.org/blog/2022/10/03/strongswan-vulnerability-%28cve-2022-40617%29.html
2022-10-31
Published