CVE-2018-17540
libstrongswan-standard-plugins: The gmp plugin in strongSwan before 5.7.1 has a Buffer Overflow via a crafted certificate.
CVE-2018-17540 is fixed in 20 products on 1 platform, first by charon-cmd 5.6.2-1ubuntu2.3, released October 1, 2018. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0351
89th percentile
The gmp plugin in strongSwan before 5.7.1 has a Buffer Overflow via a crafted certificate.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| charon-cmd · Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.3 | charon-cmd 5.6.2-1ubuntu2.3 | Oct 1, 2018 |
| charon-systemd · Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.3 | charon-systemd 5.6.2-1ubuntu2.3 | Oct 1, 2018 |
| libcharon-extra-plugins · Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.3 | libcharon-extra-plugins 5.6.2-1ubuntu2.3 | Oct 1, 2018 |
| libcharon-standard-plugins · Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.3 | libcharon-standard-plugins 5.6.2-1ubuntu2.3 | Oct 1, 2018 |
| libstrongswan · Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.3 | libstrongswan 5.6.2-1ubuntu2.3 | Oct 1, 2018 |
| libstrongswan-extra-plugins · Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.3 | libstrongswan-extra-plugins 5.6.2-1ubuntu2.3 | Oct 1, 2018 |
| libstrongswan-standard-plugins · Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.3 | libstrongswan-standard-plugins 5.6.2-1ubuntu2.3 | Oct 1, 2018 |
| strongswan · Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.3 | strongswan 5.6.2-1ubuntu2.3 | Oct 1, 2018 |
| strongswan-charon · Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.3 | strongswan-charon 5.6.2-1ubuntu2.3 | Oct 1, 2018 |
| strongswan-libcharon · Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.3 | strongswan-libcharon 5.6.2-1ubuntu2.3 | Oct 1, 2018 |
| strongswan-nm · Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.3 | strongswan-nm 5.6.2-1ubuntu2.3 | Oct 1, 2018 |
| strongswan-pki · Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.3 | strongswan-pki 5.6.2-1ubuntu2.3 | Oct 1, 2018 |
| strongswan-scepclient · Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.3 | strongswan-scepclient 5.6.2-1ubuntu2.3 | Oct 1, 2018 |
| strongswan-starter · Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.3 | strongswan-starter 5.6.2-1ubuntu2.3 | Oct 1, 2018 |
| strongswan-swanctl · Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.3 | strongswan-swanctl 5.6.2-1ubuntu2.3 | Oct 1, 2018 |
| strongswan-tnc-base · Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.3 | strongswan-tnc-base 5.6.2-1ubuntu2.3 | Oct 1, 2018 |
| strongswan-tnc-client · Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.3 | strongswan-tnc-client 5.6.2-1ubuntu2.3 | Oct 1, 2018 |
| strongswan-tnc-ifmap · Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.3 | strongswan-tnc-ifmap 5.6.2-1ubuntu2.3 | Oct 1, 2018 |
| strongswan-tnc-pdp · Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.3 | strongswan-tnc-pdp 5.6.2-1ubuntu2.3 | Oct 1, 2018 |
| strongswan-tnc-server · Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.3 | strongswan-tnc-server 5.6.2-1ubuntu2.3 | Oct 1, 2018 |