漏洞编号：CVE-2017-9022 Ubuntu Security Notification for Strongswan Vulnerabilities (USN-3301-1)

2017年6月3日 934点热度 0人点赞 0条评论

漏洞类别：Ubuntu

漏洞等级：

漏洞信息

It was discovered that the strongSwan gmp plugin incorrectly validated RSA public keys.

It was discovered that strongSwan incorrectly parsed ASN.1 CHOICE types.

漏洞危害

A remote attacker could use this issue to cause strongSwan to crash, resulting in a denial of service. (CVE-2017-9022)

A remote attacker could use this issue to cause strongSwan to hang, resulting in a denial of service. (CVE-2017-9023)

解决方案

Refer to Ubuntu advisory USN-3301-1 for affected packages and patching details, or update with your package manager.

Patch:
Following are links for downloading patches to fix the vulnerabilities:

0daybank