kritisch
CVE-2023-26463
strongSwan 5.9.8 and 5.9.9 potentially allows remote code execution be ...
In der Trivy Database seit spätestens 24. Okt. 2026, 07:11 UTCWann der Eintrag vor diesem Build hinzukam, ist nicht erfasst.
Einstufung nach Quelle
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Trivys eigenes Label ist CRITICAL. Kritisch laut NVD, CBL-Mariner, Photon OS. Niedriger laut Ubuntu (hoch).
Beschreibung
strongSwan 5.9.8 and 5.9.9 potentially allows remote code execution because it uses a variable named "public" for two different purposes within the same function. There is initially incorrect access control, later followed by an expired pointer dereference. One attack vector is sending an untrusted client certificate during EAP-TLS. A server is affected only if it loads plugins that implement TLS-based EAP methods (EAP-TLS, EAP-TTLS, EAP-PEAP, or EAP-TNC). This is fixed in 5.9.10.
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| CBL-Mariner 2.0 | strongswan | 0:5.9.10-1.cm2 |
| Photon OS 4.0 | strongswan | 5.9.8-2.ph4 |
| Photon OS 5.0 | strongswan | 5.9.8-3.ph5 |
| alpine 3.17 | strongswan | 5.9.10-r0 |
| alpine 3.18 | strongswan | 5.9.10-r0 |
| alpine 3.19 | strongswan | 5.9.10-r0 |
| alpine 3.20 | strongswan | 5.9.10-r0 |
| alpine 3.21 | strongswan | 5.9.10-r0 |
| alpine 3.22 | strongswan | 5.9.10-r0 |
| alpine 3.23 | strongswan | 5.9.10-r0 |
| alpine 3.24 | strongswan | 5.9.10-r0 |
| alpine edge | strongswan | 5.9.10-r0 |
Alle 17 Einträge aus 17 Quellen zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| CBL-Mariner 2.0 | strongswan | 0:5.9.10-1.cm2 |
| Photon OS 4.0 | strongswan | 5.9.8-2.ph4 |
| Photon OS 5.0 | strongswan | 5.9.8-3.ph5 |
| alpine 3.17 | strongswan | 5.9.10-r0 |
| alpine 3.18 | strongswan | 5.9.10-r0 |
| alpine 3.19 | strongswan | 5.9.10-r0 |
| alpine 3.20 | strongswan | 5.9.10-r0 |
| alpine 3.21 | strongswan | 5.9.10-r0 |
| alpine 3.22 | strongswan | 5.9.10-r0 |
| alpine 3.23 | strongswan | 5.9.10-r0 |
| alpine 3.24 | strongswan | 5.9.10-r0 |
| alpine edge | strongswan | 5.9.10-r0 |
| debian 12 | strongswan | 5.9.8-4 |
| debian 13 | strongswan | 5.9.8-4 |
| debian 14 | strongswan | 5.9.8-4 |
| echo | strongswan | 5.9.8-4 |
| ubuntu 23.04 | strongswan | 5.9.8-3ubuntu3 |