CVE ID:	CVE-2022-40617
Description:	strongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation plugin by sending a crafted end-entity (and intermediate CA) certificate that contains a CRL/OCSP URL that points to a server (under the attacker's control) that doesn't properly respond but (for example) just does nothing after the initial TCP handshake, or sends an excessive amount of application data.
Test IDs:	1.3.6.1.4.1.25623.1.0.705249   1.3.6.1.4.1.25623.1.0.822823   1.3.6.1.4.1.25623.1.1.4.2022.4159.1   1.3.6.1.4.1.25623.1.1.12.2022.5651.2   1.3.6.1.4.1.25623.1.1.4.2022.4197.1   1.3.6.1.4.1.25623.1.0.822704   1.3.6.1.4.1.25623.1.1.12.2022.5651.1   1.3.6.1.4.1.25623.1.0.148837   1.3.6.1.4.1.25623.1.0.893143   1.3.6.1.4.1.25623.1.1.4.2022.4185.1
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2022-40617 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/J3GAYIOCSLU57C45CO4UE4IV4JZE4W3L/