CVE-2018-5388
charon-cmd: In stroke_socket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer underflow, which ma...
CVE-2018-5388 is fixed in 20 products on 1 platform, first by charon-cmd 5.6.2-1ubuntu2.2, released September 24, 2018. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Low
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0392
90th percentile
In stroke_socket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer underflow, which may lead to resource exhaustion and denial of service while reading from the socket.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| charon-cmd · Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | charon-cmd 5.6.2-1ubuntu2.2 | Sep 24, 2018 |
| charon-systemd · Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | charon-systemd 5.6.2-1ubuntu2.2 | Sep 24, 2018 |
| libcharon-extra-plugins · Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | libcharon-extra-plugins 5.6.2-1ubuntu2.2 | Sep 24, 2018 |
| libcharon-standard-plugins · Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | libcharon-standard-plugins 5.6.2-1ubuntu2.2 | Sep 24, 2018 |
| libstrongswan · Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | libstrongswan 5.6.2-1ubuntu2.2 | Sep 24, 2018 |
| libstrongswan-extra-plugins · Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | libstrongswan-extra-plugins 5.6.2-1ubuntu2.2 | Sep 24, 2018 |
| libstrongswan-standard-plugins · Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | libstrongswan-standard-plugins 5.6.2-1ubuntu2.2 | Sep 24, 2018 |
| strongswan · Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | strongswan 5.6.2-1ubuntu2.2 | Sep 24, 2018 |
| strongswan-charon · Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | strongswan-charon 5.6.2-1ubuntu2.2 | Sep 24, 2018 |
| strongswan-libcharon · Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | strongswan-libcharon 5.6.2-1ubuntu2.2 | Sep 24, 2018 |
| strongswan-nm · Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | strongswan-nm 5.6.2-1ubuntu2.2 | Sep 24, 2018 |
| strongswan-pki · Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | strongswan-pki 5.6.2-1ubuntu2.2 | Sep 24, 2018 |
| strongswan-scepclient · Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | strongswan-scepclient 5.6.2-1ubuntu2.2 | Sep 24, 2018 |
| strongswan-starter · Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | strongswan-starter 5.6.2-1ubuntu2.2 | Sep 24, 2018 |
| strongswan-swanctl · Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | strongswan-swanctl 5.6.2-1ubuntu2.2 | Sep 24, 2018 |
| strongswan-tnc-base · Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | strongswan-tnc-base 5.6.2-1ubuntu2.2 | Sep 24, 2018 |
| strongswan-tnc-client · Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | strongswan-tnc-client 5.6.2-1ubuntu2.2 | Sep 24, 2018 |
| strongswan-tnc-ifmap · Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | strongswan-tnc-ifmap 5.6.2-1ubuntu2.2 | Sep 24, 2018 |
| strongswan-tnc-pdp · Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | strongswan-tnc-pdp 5.6.2-1ubuntu2.2 | Sep 24, 2018 |
| strongswan-tnc-server · Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | strongswan-tnc-server 5.6.2-1ubuntu2.2 | Sep 24, 2018 |