# CVE-2018-5388: charon-cmd: In stroke_socket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer underflow, which ma...

CVE-2018-5388 is fixed in 20 products on 1 platform, first by charon-cmd 5.6.2-1ubuntu2.2, released September 24, 2018. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2018-5388
- Priority: Routine
- CVSS: n/a (Low)
- EPSS: 0.0392
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: May 30, 2018

## Description

In stroke_socket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer underflow, which may lead to resource exhaustion and denial of service while reading from the socket.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | charon-cmd Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | [charon-cmd 5.6.2-1ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-charon-cmd-5.6.2-1ubuntu2.2.md) | Sep 24, 2018 |
| Linux | charon-systemd Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | [charon-systemd 5.6.2-1ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-charon-systemd-5.6.2-1ubuntu2.2.md) | Sep 24, 2018 |
| Linux | libcharon-extra-plugins Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | [libcharon-extra-plugins 5.6.2-1ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libcharon-extra-plugins-5.6.2-1ubuntu2.2.md) | Sep 24, 2018 |
| Linux | libcharon-standard-plugins Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | [libcharon-standard-plugins 5.6.2-1ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libcharon-standard-plugins-5.6.2-1ubuntu2.2.md) | Sep 24, 2018 |
| Linux | libstrongswan Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | [libstrongswan 5.6.2-1ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libstrongswan-5.6.2-1ubuntu2.2.md) | Sep 24, 2018 |
| Linux | libstrongswan-extra-plugins Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | [libstrongswan-extra-plugins 5.6.2-1ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libstrongswan-extra-plugins-5.6.2-1ubuntu2.2.md) | Sep 24, 2018 |
| Linux | libstrongswan-standard-plugins Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | [libstrongswan-standard-plugins 5.6.2-1ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libstrongswan-standard-plugins-5.6.2-1ubuntu2.2.md) | Sep 24, 2018 |
| Linux | strongswan Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | [strongswan 5.6.2-1ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-strongswan-5.6.2-1ubuntu2.2.md) | Sep 24, 2018 |
| Linux | strongswan-charon Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | [strongswan-charon 5.6.2-1ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-strongswan-charon-5.6.2-1ubuntu2.2.md) | Sep 24, 2018 |
| Linux | strongswan-libcharon Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | [strongswan-libcharon 5.6.2-1ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-strongswan-libcharon-5.6.2-1ubuntu2.2.md) | Sep 24, 2018 |
| Linux | strongswan-nm Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | [strongswan-nm 5.6.2-1ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-strongswan-nm-5.6.2-1ubuntu2.2.md) | Sep 24, 2018 |
| Linux | strongswan-pki Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | [strongswan-pki 5.6.2-1ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-strongswan-pki-5.6.2-1ubuntu2.2.md) | Sep 24, 2018 |
| Linux | strongswan-scepclient Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | [strongswan-scepclient 5.6.2-1ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-strongswan-scepclient-5.6.2-1ubuntu2.2.md) | Sep 24, 2018 |
| Linux | strongswan-starter Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | [strongswan-starter 5.6.2-1ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-strongswan-starter-5.6.2-1ubuntu2.2.md) | Sep 24, 2018 |
| Linux | strongswan-swanctl Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | [strongswan-swanctl 5.6.2-1ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-strongswan-swanctl-5.6.2-1ubuntu2.2.md) | Sep 24, 2018 |
| Linux | strongswan-tnc-base Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | [strongswan-tnc-base 5.6.2-1ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-strongswan-tnc-base-5.6.2-1ubuntu2.2.md) | Sep 24, 2018 |
| Linux | strongswan-tnc-client Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | [strongswan-tnc-client 5.6.2-1ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-strongswan-tnc-client-5.6.2-1ubuntu2.2.md) | Sep 24, 2018 |
| Linux | strongswan-tnc-ifmap Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | [strongswan-tnc-ifmap 5.6.2-1ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-strongswan-tnc-ifmap-5.6.2-1ubuntu2.2.md) | Sep 24, 2018 |
| Linux | strongswan-tnc-pdp Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | [strongswan-tnc-pdp 5.6.2-1ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-strongswan-tnc-pdp-5.6.2-1ubuntu2.2.md) | Sep 24, 2018 |
| Linux | strongswan-tnc-server Ubuntu 18.04.6 LTS (bionic) | 5.6.2-1ubuntu2.2 | [strongswan-tnc-server 5.6.2-1ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-strongswan-tnc-server-5.6.2-1ubuntu2.2.md) | Sep 24, 2018 |

---

Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo