CVE-2021-41990

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 18-10-2021 04:15

Last modified: - 12-04-2022 08:41

Total changes: - 6

Description

The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate with an RSASSA-PSS signature. For example, this can be triggered by an unrelated self-signed CA certificate sent by an initiator. Remote code execution cannot occur.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Low

Attack complexity

Network

Attack vector

High

Availability

None

Confidentiality

None

Integrity

None

Privileges required

Unchanged

Scope

None

User interaction

7.5

Base score

3.9

3.6

Exploitability score

Impact score

Verification logic

vendor=strongswan AND product=strongswan AND versionStartIncluding=5.6.1 AND versionEndExcluding=5.9.4

vendor=Debian AND product=debian_linux AND version=10.0

vendor=Debian AND product=debian_linux AND version=11.0

vendor=fedoraproject AND product=fedora AND version=33

vendor=fedoraproject AND product=fedora AND version=34

vendor=fedoraproject AND product=fedora AND version=35

AND

vendor=siemens AND product=6gk6108-4am00-2ba2_firmware AND version=-

vendor=siemens AND product=6gk6108-4am00-2ba2 AND version=-

AND

vendor=siemens AND product=6gk6108-4am00-2da2_firmware AND version=-

vendor=siemens AND product=6gk6108-4am00-2da2 AND version=-

AND

vendor=siemens AND product=6gk5804-0ap00-2aa2_firmware AND version=-

vendor=siemens AND product=6gk5804-0ap00-2aa2 AND version=-

AND

vendor=siemens AND product=6gk5812-1aa00-2aa2_firmware AND version=-

vendor=siemens AND product=6gk5812-1aa00-2aa2 AND version=-

AND

vendor=siemens AND product=6gk5812-1ba00-2aa2_firmware AND version=-

vendor=siemens AND product=6gk5812-1ba00-2aa2 AND version=-

AND

vendor=siemens AND product=6gk5816-1aa00-2aa2_firmware AND version=-

vendor=siemens AND product=6gk5816-1aa00-2aa2 AND version=-

AND

vendor=siemens AND product=6gk5816-1ba00-2aa2_firmware AND version=-

vendor=siemens AND product=6gk5816-1ba00-2aa2 AND version=-

AND

vendor=siemens AND product=6gk5826-2ab00-2ab2_firmware AND version=-

vendor=siemens AND product=6gk5826-2ab00-2ab2 AND version=-

AND

vendor=siemens AND product=6gk5874-2aa00-2aa2_firmware AND version=-

vendor=siemens AND product=6gk5874-2aa00-2aa2 AND version=-

AND

vendor=siemens AND product=6gk5874-3aa00-2aa2_firmware AND version=-

vendor=siemens AND product=6gk5874-3aa00-2aa2 AND version=-

AND

vendor=siemens AND product=6gk5876-3aa02-2ba2_firmware AND version=-

vendor=siemens AND product=6gk5876-3aa02-2ba2 AND version=-

AND

vendor=siemens AND product=6gk5876-3aa02-2ea2_firmware AND version=-

vendor=siemens AND product=6gk5876-3aa02-2ea2 AND version=-

AND

vendor=siemens AND product=6gk5876-4aa00-2ba2_firmware AND version=-

vendor=siemens AND product=6gk5876-4aa00-2ba2 AND version=-

AND

vendor=siemens AND product=6gk5876-4aa00-2da2_firmware AND version=-

vendor=siemens AND product=6gk5876-4aa00-2da2 AND version=-

AND

vendor=siemens AND product=6gk5856-2ea00-3da1_firmware AND version=-

vendor=siemens AND product=6gk5856-2ea00-3da1 AND version=-

AND

vendor=siemens AND product=6gk5856-2ea00-3aa1_firmware AND version=-

vendor=siemens AND product=6gk5856-2ea00-3aa1 AND version=-

AND

vendor=siemens AND product=6gk5615-0aa00-2aa2_firmware AND version=-

vendor=siemens AND product=6gk5615-0aa00-2aa2 AND version=-

Reference

https://github.com/strongswan/strongswan/releases/tag/5.9.4
https://www.strongswan.org/blog/2021/10/18/strongswan-vulnerability-(cve-2021-41990).html
DSA-4989-Third Party Advisory
FEDORA-2021-b3df83339e-Mailing List, Third Party Advisory
FEDORA-2021-0b37146973-Mailing List, Third Party Advisory
FEDORA-2021-95fab6a482-Mailing List, Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-539476.pdf

Keywords

CVE-2021-41990

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2021-41990

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures