kritik
CVE-2023-26463
strongSwan 5.9.8 and 5.9.9 potentially allows remote code execution be ...
En geç 24 Eki 2026, 07:11 UTC tarihinden beri Trivy database'indeO derlemeden önce ne zaman girdiği kayıtlı değil.
Kaynağa göre önem derecesi
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: NVD, CBL-Mariner, Photon OS. Daha düşük diyenler: Ubuntu (yüksek).
Açıklama
strongSwan 5.9.8 and 5.9.9 potentially allows remote code execution because it uses a variable named "public" for two different purposes within the same function. There is initially incorrect access control, later followed by an expired pointer dereference. One attack vector is sending an untrusted client certificate during EAP-TLS. A server is affected only if it loads plugins that implement TLS-based EAP methods (EAP-TLS, EAP-TTLS, EAP-PEAP, or EAP-TNC). This is fixed in 5.9.10.
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| CBL-Mariner 2.0 | strongswan | 0:5.9.10-1.cm2 |
| Photon OS 4.0 | strongswan | 5.9.8-2.ph4 |
| Photon OS 5.0 | strongswan | 5.9.8-3.ph5 |
| alpine 3.17 | strongswan | 5.9.10-r0 |
| alpine 3.18 | strongswan | 5.9.10-r0 |
| alpine 3.19 | strongswan | 5.9.10-r0 |
| alpine 3.20 | strongswan | 5.9.10-r0 |
| alpine 3.21 | strongswan | 5.9.10-r0 |
| alpine 3.22 | strongswan | 5.9.10-r0 |
| alpine 3.23 | strongswan | 5.9.10-r0 |
| alpine 3.24 | strongswan | 5.9.10-r0 |
| alpine edge | strongswan | 5.9.10-r0 |
17 kaynaktaki 17 kaydın hepsini göster
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| CBL-Mariner 2.0 | strongswan | 0:5.9.10-1.cm2 |
| Photon OS 4.0 | strongswan | 5.9.8-2.ph4 |
| Photon OS 5.0 | strongswan | 5.9.8-3.ph5 |
| alpine 3.17 | strongswan | 5.9.10-r0 |
| alpine 3.18 | strongswan | 5.9.10-r0 |
| alpine 3.19 | strongswan | 5.9.10-r0 |
| alpine 3.20 | strongswan | 5.9.10-r0 |
| alpine 3.21 | strongswan | 5.9.10-r0 |
| alpine 3.22 | strongswan | 5.9.10-r0 |
| alpine 3.23 | strongswan | 5.9.10-r0 |
| alpine 3.24 | strongswan | 5.9.10-r0 |
| alpine edge | strongswan | 5.9.10-r0 |
| debian 12 | strongswan | 5.9.8-4 |
| debian 13 | strongswan | 5.9.8-4 |
| debian 14 | strongswan | 5.9.8-4 |
| echo | strongswan | 5.9.8-4 |
| ubuntu 23.04 | strongswan | 5.9.8-3ubuntu3 |