{
  "cveId": "CVE-2022-4967",
  "url": "https://patchblox.com/security/cve/CVE-2022-4967",
  "summary": "CVE-2022-4967 is fixed in 15 products on 1 platform, first by charon-cmd 5.9.5-2ubuntu2.3, released May 13, 2024. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "strongswan: strongSwan versions 5.9.2 through 5.9.5 are affected by authorization bypass through improper validation of certifica...",
  "description": "strongSwan versions 5.9.2 through 5.9.5 are affected by authorization bypass through improper validation of certificate with host mismatch (CWE-297). When certificates are used to authenticate clients in TLS-based EAP methods, the IKE or EAP identity supplied by a client is not enforced to be contained in the client\u0027s certificate. So clients can authenticate with any trusted certificate and claim an arbitrary IKE/EAP identity as their own. This is problematic if the identity is used to make policy decisions. A fix was released in strongSwan version 5.9.6 in August 2022 (e4b4aabc4996fc61c37deab7858d07bc4d220136).",
  "published": "2024-05-13T11:00:00Z",
  "severity": "medium",
  "cvss": 6.5,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
  "epss": 0.00464,
  "epssPercentile": 0.40456,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "charon-cmd",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "5.9.5-2ubuntu2.3",
      "fix": "charon-cmd 5.9.5-2ubuntu2.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-charon-cmd-5.9.5-2ubuntu2.3",
      "released": "2024-05-13T11:00:00Z"
    },
    {
      "platform": "linux",
      "product": "charon-systemd",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "5.9.5-2ubuntu2.3",
      "fix": "charon-systemd 5.9.5-2ubuntu2.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-charon-systemd-5.9.5-2ubuntu2.3",
      "released": "2024-05-13T11:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libcharon-extauth-plugins",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "5.9.5-2ubuntu2.3",
      "fix": "libcharon-extauth-plugins 5.9.5-2ubuntu2.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libcharon-extauth-plugins-5.9.5-2ubuntu2.3",
      "released": "2024-05-13T11:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libcharon-extra-plugins",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "5.9.5-2ubuntu2.3",
      "fix": "libcharon-extra-plugins 5.9.5-2ubuntu2.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libcharon-extra-plugins-5.9.5-2ubuntu2.3",
      "released": "2024-05-13T11:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libstrongswan",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "5.9.5-2ubuntu2.3",
      "fix": "libstrongswan 5.9.5-2ubuntu2.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libstrongswan-5.9.5-2ubuntu2.3",
      "released": "2024-05-13T11:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libstrongswan-extra-plugins",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "5.9.5-2ubuntu2.3",
      "fix": "libstrongswan-extra-plugins 5.9.5-2ubuntu2.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libstrongswan-extra-plugins-5.9.5-2ubuntu2.3",
      "released": "2024-05-13T11:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libstrongswan-standard-plugins",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "5.9.5-2ubuntu2.3",
      "fix": "libstrongswan-standard-plugins 5.9.5-2ubuntu2.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libstrongswan-standard-plugins-5.9.5-2ubuntu2.3",
      "released": "2024-05-13T11:00:00Z"
    },
    {
      "platform": "linux",
      "product": "strongswan",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "5.9.6-1",
      "fix": "DEBIAN-CVE-2022-4967",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-4967",
      "released": "2024-05-14T11:57:00Z"
    },
    {
      "platform": "linux",
      "product": "strongswan",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "5.9.6-1",
      "fix": "DEBIAN-CVE-2022-4967",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-4967",
      "released": "2024-05-14T11:57:00Z"
    },
    {
      "platform": "linux",
      "product": "strongswan",
      "release": "Debian 14",
      "fixedVersion": "5.9.6-1",
      "fix": "DEBIAN-CVE-2022-4967",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-4967",
      "released": "2024-05-14T11:57:00Z"
    },
    {
      "platform": "linux",
      "product": "strongswan",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "5.9.5-2ubuntu2.3",
      "fix": "strongswan 5.9.5-2ubuntu2.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-strongswan-5.9.5-2ubuntu2.3",
      "released": "2024-05-13T11:00:00Z"
    },
    {
      "platform": "linux",
      "product": "strongswan-charon",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "5.9.5-2ubuntu2.3",
      "fix": "strongswan-charon 5.9.5-2ubuntu2.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-strongswan-charon-5.9.5-2ubuntu2.3",
      "released": "2024-05-13T11:00:00Z"
    },
    {
      "platform": "linux",
      "product": "strongswan-libcharon",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "5.9.5-2ubuntu2.3",
      "fix": "strongswan-libcharon 5.9.5-2ubuntu2.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-strongswan-libcharon-5.9.5-2ubuntu2.3",
      "released": "2024-05-13T11:00:00Z"
    },
    {
      "platform": "linux",
      "product": "strongswan-nm",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "5.9.5-2ubuntu2.3",
      "fix": "strongswan-nm 5.9.5-2ubuntu2.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-strongswan-nm-5.9.5-2ubuntu2.3",
      "released": "2024-05-13T11:00:00Z"
    },
    {
      "platform": "linux",
      "product": "strongswan-pki",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "5.9.5-2ubuntu2.3",
      "fix": "strongswan-pki 5.9.5-2ubuntu2.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-strongswan-pki-5.9.5-2ubuntu2.3",
      "released": "2024-05-13T11:00:00Z"
    },
    {
      "platform": "linux",
      "product": "strongswan-scepclient",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "5.9.5-2ubuntu2.3",
      "fix": "strongswan-scepclient 5.9.5-2ubuntu2.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-strongswan-scepclient-5.9.5-2ubuntu2.3",
      "released": "2024-05-13T11:00:00Z"
    },
    {
      "platform": "linux",
      "product": "strongswan-starter",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "5.9.5-2ubuntu2.3",
      "fix": "strongswan-starter 5.9.5-2ubuntu2.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-strongswan-starter-5.9.5-2ubuntu2.3",
      "released": "2024-05-13T11:00:00Z"
    },
    {
      "platform": "linux",
      "product": "strongswan-swanctl",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "5.9.5-2ubuntu2.3",
      "fix": "strongswan-swanctl 5.9.5-2ubuntu2.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-strongswan-swanctl-5.9.5-2ubuntu2.3",
      "released": "2024-05-13T11:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T00:53:09Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}