Test Kennung:	1.3.6.1.4.1.25623.1.0.148837
Kategorie:	Denial of Service
Titel:	strongSwan 4.x < 5.9.8 DoS Vulnerability
Zusammenfassung:	strongSwan is prone to a denial of service (DoS) vulnerability.
Beschreibung:	Summary: strongSwan is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: strongSwan allows remote attackers to cause a denial of service in the revocation plugin by sending a crafted end-entity (and intermediate CA) certificate that contains a CRL/OCSP URL that points to a server (under the attacker's control) that doesn't properly respond but (for example) just does nothing after the initial TCP handshake, or sends an excessive amount of application data. Affected Software/OS: strongSwan version 4.x through 5.9.7. Solution: Update to version 5.9.8 or later or apply the provided patch. CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2022-40617 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/J3GAYIOCSLU57C45CO4UE4IV4JZE4W3L/
Copyright	Copyright (C) 2022 Greenbone Networks GmbH

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.