csaf_suse - suse-su-2019:3056-1

suse-su-2019:3056-1

Vulnerability from csaf_suse

Published

2019-11-25 16:30

Modified

2019-11-25 16:30

Summary

Security update for strongswan

Notes

Title of the patch

Security update for strongswan

Description of the patch

This update for strongswan fixes the following issues: Security issues fixed: - CVE-2018-5388: Fixed a buffer underflow which may allow to a remote attacker with local user credentials to resource exhaustion and denial of service while reading from the socket (bsc#1094462). - CVE-2018-10811: Fixed a denial of service during the IKEv2 key derivation if the openssl plugin is used in FIPS mode and HMAC-MD5 is negotiated as PRF (bsc#1093536). - CVE-2018-16151,CVE-2018-16152: Fixed multiple flaws in the gmp plugin which might lead to authorization bypass (bsc#1107874). - CVE-2018-17540: Fixed an improper input validation in gmp plugin (bsc#1109845).

Patchnames

SUSE-2019-3056,SUSE-SLE-Module-Basesystem-15-2019-3056,SUSE-SLE-Module-Basesystem-15-SP1-2019-3056,SUSE-SLE-Module-Development-Tools-OBS-15-2019-3056,SUSE-SLE-Module-Development-Tools-OBS-15-SP1-2019-3056,SUSE-SLE-Module-Packagehub-Subpackages-15-2019-3056

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for strongswan",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for strongswan fixes the following issues:\n\nSecurity issues fixed: \n\n- CVE-2018-5388: Fixed a buffer underflow which may allow to a remote attacker \n  with local user credentials to resource exhaustion and denial of service while \n  reading from the socket (bsc#1094462).\n- CVE-2018-10811: Fixed a denial of service during  the IKEv2 key derivation if \n  the openssl plugin is used in FIPS mode and HMAC-MD5 is negotiated as PRF \n  (bsc#1093536).\n- CVE-2018-16151,CVE-2018-16152: Fixed multiple flaws in the gmp plugin which \n  might lead to authorization bypass (bsc#1107874).\n- CVE-2018-17540: Fixed an improper input validation in gmp plugin (bsc#1109845).  \n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2019-3056,SUSE-SLE-Module-Basesystem-15-2019-3056,SUSE-SLE-Module-Basesystem-15-SP1-2019-3056,SUSE-SLE-Module-Development-Tools-OBS-15-2019-3056,SUSE-SLE-Module-Development-Tools-OBS-15-SP1-2019-3056,SUSE-SLE-Module-Packagehub-Subpackages-15-2019-3056",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2019_3056-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2019:3056-1",
        "url": "https://www.suse.com/support/update/announcement/2019/suse-su-20193056-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2019:3056-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2019-November/006173.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1093536",
        "url": "https://bugzilla.suse.com/1093536"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1094462",
        "url": "https://bugzilla.suse.com/1094462"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1107874",
        "url": "https://bugzilla.suse.com/1107874"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1109845",
        "url": "https://bugzilla.suse.com/1109845"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-10811 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-10811/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-16151 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-16151/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-16152 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-16152/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-17540 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-17540/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-5388 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-5388/"
      }
    ],
    "title": "Security update for strongswan",
    "tracking": {
      "current_release_date": "2019-11-25T16:30:01Z",
      "generator": {
        "date": "2019-11-25T16:30:01Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2019:3056-1",
      "initial_release_date": "2019-11-25T16:30:01Z",
      "revision_history": [
        {
          "date": "2019-11-25T16:30:01Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "strongswan-5.6.0-4.3.2.aarch64",
                "product": {
                  "name": "strongswan-5.6.0-4.3.2.aarch64",
                  "product_id": "strongswan-5.6.0-4.3.2.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "strongswan-hmac-5.6.0-4.3.2.aarch64",
                "product": {
                  "name": "strongswan-hmac-5.6.0-4.3.2.aarch64",
                  "product_id": "strongswan-hmac-5.6.0-4.3.2.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "strongswan-ipsec-5.6.0-4.3.2.aarch64",
                "product": {
                  "name": "strongswan-ipsec-5.6.0-4.3.2.aarch64",
                  "product_id": "strongswan-ipsec-5.6.0-4.3.2.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "strongswan-libs0-5.6.0-4.3.2.aarch64",
                "product": {
                  "name": "strongswan-libs0-5.6.0-4.3.2.aarch64",
                  "product_id": "strongswan-libs0-5.6.0-4.3.2.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "strongswan-mysql-5.6.0-4.3.2.aarch64",
                "product": {
                  "name": "strongswan-mysql-5.6.0-4.3.2.aarch64",
                  "product_id": "strongswan-mysql-5.6.0-4.3.2.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "strongswan-nm-5.6.0-4.3.2.aarch64",
                "product": {
                  "name": "strongswan-nm-5.6.0-4.3.2.aarch64",
                  "product_id": "strongswan-nm-5.6.0-4.3.2.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "strongswan-sqlite-5.6.0-4.3.2.aarch64",
                "product": {
                  "name": "strongswan-sqlite-5.6.0-4.3.2.aarch64",
                  "product_id": "strongswan-sqlite-5.6.0-4.3.2.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "strongswan-5.6.0-4.3.2.i586",
                "product": {
                  "name": "strongswan-5.6.0-4.3.2.i586",
                  "product_id": "strongswan-5.6.0-4.3.2.i586"
                }
              },
              {
                "category": "product_version",
                "name": "strongswan-hmac-5.6.0-4.3.2.i586",
                "product": {
                  "name": "strongswan-hmac-5.6.0-4.3.2.i586",
                  "product_id": "strongswan-hmac-5.6.0-4.3.2.i586"
                }
              },
              {
                "category": "product_version",
                "name": "strongswan-ipsec-5.6.0-4.3.2.i586",
                "product": {
                  "name": "strongswan-ipsec-5.6.0-4.3.2.i586",
                  "product_id": "strongswan-ipsec-5.6.0-4.3.2.i586"
                }
              },
              {
                "category": "product_version",
                "name": "strongswan-libs0-5.6.0-4.3.2.i586",
                "product": {
                  "name": "strongswan-libs0-5.6.0-4.3.2.i586",
                  "product_id": "strongswan-libs0-5.6.0-4.3.2.i586"
                }
              },
              {
                "category": "product_version",
                "name": "strongswan-mysql-5.6.0-4.3.2.i586",
                "product": {
                  "name": "strongswan-mysql-5.6.0-4.3.2.i586",
                  "product_id": "strongswan-mysql-5.6.0-4.3.2.i586"
                }
              },
              {
                "category": "product_version",
                "name": "strongswan-nm-5.6.0-4.3.2.i586",
                "product": {
                  "name": "strongswan-nm-5.6.0-4.3.2.i586",
                  "product_id": "strongswan-nm-5.6.0-4.3.2.i586"
                }
              },
              {
                "category": "product_version",
                "name": "strongswan-sqlite-5.6.0-4.3.2.i586",
                "product": {
                  "name": "strongswan-sqlite-5.6.0-4.3.2.i586",
                  "product_id": "strongswan-sqlite-5.6.0-4.3.2.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "strongswan-doc-5.6.0-4.3.2.noarch",
                "product": {
                  "name": "strongswan-doc-5.6.0-4.3.2.noarch",
                  "product_id": "strongswan-doc-5.6.0-4.3.2.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "strongswan-5.6.0-4.3.2.ppc64le",
                "product": {
                  "name": "strongswan-5.6.0-4.3.2.ppc64le",
                  "product_id": "strongswan-5.6.0-4.3.2.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "strongswan-hmac-5.6.0-4.3.2.ppc64le",
                "product": {
                  "name": "strongswan-hmac-5.6.0-4.3.2.ppc64le",
                  "product_id": "strongswan-hmac-5.6.0-4.3.2.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "strongswan-ipsec-5.6.0-4.3.2.ppc64le",
                "product": {
                  "name": "strongswan-ipsec-5.6.0-4.3.2.ppc64le",
                  "product_id": "strongswan-ipsec-5.6.0-4.3.2.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "strongswan-libs0-5.6.0-4.3.2.ppc64le",
                "product": {
                  "name": "strongswan-libs0-5.6.0-4.3.2.ppc64le",
                  "product_id": "strongswan-libs0-5.6.0-4.3.2.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "strongswan-mysql-5.6.0-4.3.2.ppc64le",
                "product": {
                  "name": "strongswan-mysql-5.6.0-4.3.2.ppc64le",
                  "product_id": "strongswan-mysql-5.6.0-4.3.2.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "strongswan-nm-5.6.0-4.3.2.ppc64le",
                "product": {
                  "name": "strongswan-nm-5.6.0-4.3.2.ppc64le",
                  "product_id": "strongswan-nm-5.6.0-4.3.2.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "strongswan-sqlite-5.6.0-4.3.2.ppc64le",
                "product": {
                  "name": "strongswan-sqlite-5.6.0-4.3.2.ppc64le",
                  "product_id": "strongswan-sqlite-5.6.0-4.3.2.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "strongswan-5.6.0-4.3.2.s390x",
                "product": {
                  "name": "strongswan-5.6.0-4.3.2.s390x",
                  "product_id": "strongswan-5.6.0-4.3.2.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "strongswan-hmac-5.6.0-4.3.2.s390x",
                "product": {
                  "name": "strongswan-hmac-5.6.0-4.3.2.s390x",
                  "product_id": "strongswan-hmac-5.6.0-4.3.2.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "strongswan-ipsec-5.6.0-4.3.2.s390x",
                "product": {
                  "name": "strongswan-ipsec-5.6.0-4.3.2.s390x",
                  "product_id": "strongswan-ipsec-5.6.0-4.3.2.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "strongswan-libs0-5.6.0-4.3.2.s390x",
                "product": {
                  "name": "strongswan-libs0-5.6.0-4.3.2.s390x",
                  "product_id": "strongswan-libs0-5.6.0-4.3.2.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "strongswan-mysql-5.6.0-4.3.2.s390x",
                "product": {
                  "name": "strongswan-mysql-5.6.0-4.3.2.s390x",
                  "product_id": "strongswan-mysql-5.6.0-4.3.2.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "strongswan-nm-5.6.0-4.3.2.s390x",
                "product": {
                  "name": "strongswan-nm-5.6.0-4.3.2.s390x",
                  "product_id": "strongswan-nm-5.6.0-4.3.2.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "strongswan-sqlite-5.6.0-4.3.2.s390x",
                "product": {
                  "name": "strongswan-sqlite-5.6.0-4.3.2.s390x",
                  "product_id": "strongswan-sqlite-5.6.0-4.3.2.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "strongswan-5.6.0-4.3.2.x86_64",
                "product": {
                  "name": "strongswan-5.6.0-4.3.2.x86_64",
                  "product_id": "strongswan-5.6.0-4.3.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "strongswan-hmac-5.6.0-4.3.2.x86_64",
                "product": {
                  "name": "strongswan-hmac-5.6.0-4.3.2.x86_64",
                  "product_id": "strongswan-hmac-5.6.0-4.3.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "strongswan-ipsec-5.6.0-4.3.2.x86_64",
                "product": {
                  "name": "strongswan-ipsec-5.6.0-4.3.2.x86_64",
                  "product_id": "strongswan-ipsec-5.6.0-4.3.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "strongswan-libs0-5.6.0-4.3.2.x86_64",
                "product": {
                  "name": "strongswan-libs0-5.6.0-4.3.2.x86_64",
                  "product_id": "strongswan-libs0-5.6.0-4.3.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "strongswan-mysql-5.6.0-4.3.2.x86_64",
                "product": {
                  "name": "strongswan-mysql-5.6.0-4.3.2.x86_64",
                  "product_id": "strongswan-mysql-5.6.0-4.3.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "strongswan-nm-5.6.0-4.3.2.x86_64",
                "product": {
                  "name": "strongswan-nm-5.6.0-4.3.2.x86_64",
                  "product_id": "strongswan-nm-5.6.0-4.3.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "strongswan-sqlite-5.6.0-4.3.2.x86_64",
                "product": {
                  "name": "strongswan-sqlite-5.6.0-4.3.2.x86_64",
                  "product_id": "strongswan-sqlite-5.6.0-4.3.2.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Module for Basesystem 15",
                "product": {
                  "name": "SUSE Linux Enterprise Module for Basesystem 15",
                  "product_id": "SUSE Linux Enterprise Module for Basesystem 15",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-module-basesystem:15"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Module for Basesystem 15 SP1",
                "product": {
                  "name": "SUSE Linux Enterprise Module for Basesystem 15 SP1",
                  "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-module-basesystem:15:sp1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Module for Package Hub 15",
                "product": {
                  "name": "SUSE Linux Enterprise Module for Package Hub 15",
                  "product_id": "SUSE Linux Enterprise Module for Package Hub 15",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:packagehub:15"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "strongswan-5.6.0-4.3.2.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15:strongswan-5.6.0-4.3.2.aarch64"
        },
        "product_reference": "strongswan-5.6.0-4.3.2.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "strongswan-5.6.0-4.3.2.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15:strongswan-5.6.0-4.3.2.ppc64le"
        },
        "product_reference": "strongswan-5.6.0-4.3.2.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "strongswan-5.6.0-4.3.2.s390x as component of SUSE Linux Enterprise Module for Basesystem 15",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15:strongswan-5.6.0-4.3.2.s390x"
        },
        "product_reference": "strongswan-5.6.0-4.3.2.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "strongswan-5.6.0-4.3.2.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15:strongswan-5.6.0-4.3.2.x86_64"
        },
        "product_reference": "strongswan-5.6.0-4.3.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "strongswan-doc-5.6.0-4.3.2.noarch as component of SUSE Linux Enterprise Module for Basesystem 15",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15:strongswan-doc-5.6.0-4.3.2.noarch"
        },
        "product_reference": "strongswan-doc-5.6.0-4.3.2.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "strongswan-hmac-5.6.0-4.3.2.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15:strongswan-hmac-5.6.0-4.3.2.aarch64"
        },
        "product_reference": "strongswan-hmac-5.6.0-4.3.2.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "strongswan-hmac-5.6.0-4.3.2.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15:strongswan-hmac-5.6.0-4.3.2.ppc64le"
        },
        "product_reference": "strongswan-hmac-5.6.0-4.3.2.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "strongswan-hmac-5.6.0-4.3.2.s390x as component of SUSE Linux Enterprise Module for Basesystem 15",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15:strongswan-hmac-5.6.0-4.3.2.s390x"
        },
        "product_reference": "strongswan-hmac-5.6.0-4.3.2.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "strongswan-hmac-5.6.0-4.3.2.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15:strongswan-hmac-5.6.0-4.3.2.x86_64"
        },
        "product_reference": "strongswan-hmac-5.6.0-4.3.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "strongswan-ipsec-5.6.0-4.3.2.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15:strongswan-ipsec-5.6.0-4.3.2.aarch64"
        },
        "product_reference": "strongswan-ipsec-5.6.0-4.3.2.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "strongswan-ipsec-5.6.0-4.3.2.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15:strongswan-ipsec-5.6.0-4.3.2.ppc64le"
        },
        "product_reference": "strongswan-ipsec-5.6.0-4.3.2.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "strongswan-ipsec-5.6.0-4.3.2.s390x as component of SUSE Linux Enterprise Module for Basesystem 15",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15:strongswan-ipsec-5.6.0-4.3.2.s390x"
        },
        "product_reference": "strongswan-ipsec-5.6.0-4.3.2.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "strongswan-ipsec-5.6.0-4.3.2.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15:strongswan-ipsec-5.6.0-4.3.2.x86_64"
        },
        "product_reference": "strongswan-ipsec-5.6.0-4.3.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "strongswan-libs0-5.6.0-4.3.2.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15:strongswan-libs0-5.6.0-4.3.2.aarch64"
        },
        "product_reference": "strongswan-libs0-5.6.0-4.3.2.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "strongswan-libs0-5.6.0-4.3.2.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15:strongswan-libs0-5.6.0-4.3.2.ppc64le"
        },
        "product_reference": "strongswan-libs0-5.6.0-4.3.2.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "strongswan-libs0-5.6.0-4.3.2.s390x as component of SUSE Linux Enterprise Module for Basesystem 15",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15:strongswan-libs0-5.6.0-4.3.2.s390x"
        },
        "product_reference": "strongswan-libs0-5.6.0-4.3.2.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "strongswan-libs0-5.6.0-4.3.2.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15:strongswan-libs0-5.6.0-4.3.2.x86_64"
        },
        "product_reference": "strongswan-libs0-5.6.0-4.3.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "strongswan-5.6.0-4.3.2.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-5.6.0-4.3.2.aarch64"
        },
        "product_reference": "strongswan-5.6.0-4.3.2.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "strongswan-5.6.0-4.3.2.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-5.6.0-4.3.2.ppc64le"
        },
        "product_reference": "strongswan-5.6.0-4.3.2.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "strongswan-5.6.0-4.3.2.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-5.6.0-4.3.2.s390x"
        },
        "product_reference": "strongswan-5.6.0-4.3.2.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "strongswan-5.6.0-4.3.2.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-5.6.0-4.3.2.x86_64"
        },
        "product_reference": "strongswan-5.6.0-4.3.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "strongswan-doc-5.6.0-4.3.2.noarch as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-doc-5.6.0-4.3.2.noarch"
        },
        "product_reference": "strongswan-doc-5.6.0-4.3.2.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "strongswan-hmac-5.6.0-4.3.2.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-hmac-5.6.0-4.3.2.aarch64"
        },
        "product_reference": "strongswan-hmac-5.6.0-4.3.2.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "strongswan-hmac-5.6.0-4.3.2.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-hmac-5.6.0-4.3.2.ppc64le"
        },
        "product_reference": "strongswan-hmac-5.6.0-4.3.2.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "strongswan-hmac-5.6.0-4.3.2.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-hmac-5.6.0-4.3.2.s390x"
        },
        "product_reference": "strongswan-hmac-5.6.0-4.3.2.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "strongswan-hmac-5.6.0-4.3.2.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-hmac-5.6.0-4.3.2.x86_64"
        },
        "product_reference": "strongswan-hmac-5.6.0-4.3.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "strongswan-ipsec-5.6.0-4.3.2.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-ipsec-5.6.0-4.3.2.aarch64"
        },
        "product_reference": "strongswan-ipsec-5.6.0-4.3.2.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "strongswan-ipsec-5.6.0-4.3.2.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-ipsec-5.6.0-4.3.2.ppc64le"
        },
        "product_reference": "strongswan-ipsec-5.6.0-4.3.2.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "strongswan-ipsec-5.6.0-4.3.2.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-ipsec-5.6.0-4.3.2.s390x"
        },
        "product_reference": "strongswan-ipsec-5.6.0-4.3.2.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "strongswan-ipsec-5.6.0-4.3.2.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-ipsec-5.6.0-4.3.2.x86_64"
        },
        "product_reference": "strongswan-ipsec-5.6.0-4.3.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "strongswan-libs0-5.6.0-4.3.2.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-libs0-5.6.0-4.3.2.aarch64"
        },
        "product_reference": "strongswan-libs0-5.6.0-4.3.2.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "strongswan-libs0-5.6.0-4.3.2.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-libs0-5.6.0-4.3.2.ppc64le"
        },
        "product_reference": "strongswan-libs0-5.6.0-4.3.2.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "strongswan-libs0-5.6.0-4.3.2.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-libs0-5.6.0-4.3.2.s390x"
        },
        "product_reference": "strongswan-libs0-5.6.0-4.3.2.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "strongswan-libs0-5.6.0-4.3.2.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-libs0-5.6.0-4.3.2.x86_64"
        },
        "product_reference": "strongswan-libs0-5.6.0-4.3.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "strongswan-nm-5.6.0-4.3.2.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15:strongswan-nm-5.6.0-4.3.2.aarch64"
        },
        "product_reference": "strongswan-nm-5.6.0-4.3.2.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "strongswan-nm-5.6.0-4.3.2.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15:strongswan-nm-5.6.0-4.3.2.ppc64le"
        },
        "product_reference": "strongswan-nm-5.6.0-4.3.2.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "strongswan-nm-5.6.0-4.3.2.s390x as component of SUSE Linux Enterprise Module for Package Hub 15",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15:strongswan-nm-5.6.0-4.3.2.s390x"
        },
        "product_reference": "strongswan-nm-5.6.0-4.3.2.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "strongswan-nm-5.6.0-4.3.2.x86_64 as component of SUSE Linux Enterprise Module for Package Hub 15",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15:strongswan-nm-5.6.0-4.3.2.x86_64"
        },
        "product_reference": "strongswan-nm-5.6.0-4.3.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2018-10811",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-10811"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "strongSwan 5.6.0 and older allows Remote Denial of Service because of Missing Initialization of a Variable.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-5.6.0-4.3.2.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-5.6.0-4.3.2.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-5.6.0-4.3.2.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-5.6.0-4.3.2.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-doc-5.6.0-4.3.2.noarch",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-hmac-5.6.0-4.3.2.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-hmac-5.6.0-4.3.2.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-hmac-5.6.0-4.3.2.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-hmac-5.6.0-4.3.2.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-ipsec-5.6.0-4.3.2.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-ipsec-5.6.0-4.3.2.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-ipsec-5.6.0-4.3.2.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-ipsec-5.6.0-4.3.2.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-libs0-5.6.0-4.3.2.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-libs0-5.6.0-4.3.2.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-libs0-5.6.0-4.3.2.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-libs0-5.6.0-4.3.2.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-5.6.0-4.3.2.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-5.6.0-4.3.2.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-5.6.0-4.3.2.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-5.6.0-4.3.2.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-doc-5.6.0-4.3.2.noarch",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-hmac-5.6.0-4.3.2.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-hmac-5.6.0-4.3.2.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-hmac-5.6.0-4.3.2.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-hmac-5.6.0-4.3.2.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-ipsec-5.6.0-4.3.2.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-ipsec-5.6.0-4.3.2.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-ipsec-5.6.0-4.3.2.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-ipsec-5.6.0-4.3.2.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-libs0-5.6.0-4.3.2.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-libs0-5.6.0-4.3.2.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-libs0-5.6.0-4.3.2.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-libs0-5.6.0-4.3.2.x86_64",
          "SUSE Linux Enterprise Module for Package Hub 15:strongswan-nm-5.6.0-4.3.2.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15:strongswan-nm-5.6.0-4.3.2.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15:strongswan-nm-5.6.0-4.3.2.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15:strongswan-nm-5.6.0-4.3.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-10811",
          "url": "https://www.suse.com/security/cve/CVE-2018-10811"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1093536 for CVE-2018-10811",
          "url": "https://bugzilla.suse.com/1093536"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-doc-5.6.0-4.3.2.noarch",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-hmac-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-hmac-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-hmac-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-hmac-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-ipsec-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-ipsec-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-ipsec-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-ipsec-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-libs0-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-libs0-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-libs0-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-libs0-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-doc-5.6.0-4.3.2.noarch",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-hmac-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-hmac-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-hmac-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-hmac-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-ipsec-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-ipsec-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-ipsec-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-ipsec-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-libs0-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-libs0-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-libs0-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-libs0-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Package Hub 15:strongswan-nm-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15:strongswan-nm-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15:strongswan-nm-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15:strongswan-nm-5.6.0-4.3.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-doc-5.6.0-4.3.2.noarch",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-hmac-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-hmac-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-hmac-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-hmac-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-ipsec-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-ipsec-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-ipsec-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-ipsec-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-libs0-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-libs0-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-libs0-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-libs0-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-doc-5.6.0-4.3.2.noarch",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-hmac-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-hmac-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-hmac-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-hmac-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-ipsec-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-ipsec-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-ipsec-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-ipsec-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-libs0-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-libs0-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-libs0-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-libs0-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Package Hub 15:strongswan-nm-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15:strongswan-nm-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15:strongswan-nm-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15:strongswan-nm-5.6.0-4.3.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-11-25T16:30:01Z",
          "details": "important"
        }
      ],
      "title": "CVE-2018-10811"
    },
    {
      "cve": "CVE-2018-16151",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-16151"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c in the gmp plugin in strongSwan 4.x and 5.x before 5.7.0, the RSA implementation based on GMP does not reject excess data after the encoded algorithm OID during PKCS#1 v1.5 signature verification. Similar to the flaw in the same version of strongSwan regarding digestAlgorithm.parameters, a remote attacker can forge signatures when small public exponents are being used, which could lead to impersonation when only an RSA signature is used for IKEv2 authentication.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-5.6.0-4.3.2.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-5.6.0-4.3.2.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-5.6.0-4.3.2.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-5.6.0-4.3.2.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-doc-5.6.0-4.3.2.noarch",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-hmac-5.6.0-4.3.2.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-hmac-5.6.0-4.3.2.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-hmac-5.6.0-4.3.2.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-hmac-5.6.0-4.3.2.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-ipsec-5.6.0-4.3.2.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-ipsec-5.6.0-4.3.2.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-ipsec-5.6.0-4.3.2.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-ipsec-5.6.0-4.3.2.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-libs0-5.6.0-4.3.2.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-libs0-5.6.0-4.3.2.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-libs0-5.6.0-4.3.2.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-libs0-5.6.0-4.3.2.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-5.6.0-4.3.2.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-5.6.0-4.3.2.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-5.6.0-4.3.2.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-5.6.0-4.3.2.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-doc-5.6.0-4.3.2.noarch",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-hmac-5.6.0-4.3.2.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-hmac-5.6.0-4.3.2.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-hmac-5.6.0-4.3.2.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-hmac-5.6.0-4.3.2.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-ipsec-5.6.0-4.3.2.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-ipsec-5.6.0-4.3.2.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-ipsec-5.6.0-4.3.2.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-ipsec-5.6.0-4.3.2.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-libs0-5.6.0-4.3.2.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-libs0-5.6.0-4.3.2.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-libs0-5.6.0-4.3.2.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-libs0-5.6.0-4.3.2.x86_64",
          "SUSE Linux Enterprise Module for Package Hub 15:strongswan-nm-5.6.0-4.3.2.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15:strongswan-nm-5.6.0-4.3.2.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15:strongswan-nm-5.6.0-4.3.2.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15:strongswan-nm-5.6.0-4.3.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-16151",
          "url": "https://www.suse.com/security/cve/CVE-2018-16151"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1107874 for CVE-2018-16151",
          "url": "https://bugzilla.suse.com/1107874"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1109845 for CVE-2018-16151",
          "url": "https://bugzilla.suse.com/1109845"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-doc-5.6.0-4.3.2.noarch",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-hmac-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-hmac-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-hmac-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-hmac-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-ipsec-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-ipsec-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-ipsec-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-ipsec-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-libs0-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-libs0-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-libs0-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-libs0-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-doc-5.6.0-4.3.2.noarch",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-hmac-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-hmac-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-hmac-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-hmac-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-ipsec-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-ipsec-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-ipsec-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-ipsec-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-libs0-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-libs0-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-libs0-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-libs0-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Package Hub 15:strongswan-nm-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15:strongswan-nm-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15:strongswan-nm-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15:strongswan-nm-5.6.0-4.3.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-doc-5.6.0-4.3.2.noarch",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-hmac-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-hmac-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-hmac-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-hmac-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-ipsec-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-ipsec-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-ipsec-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-ipsec-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-libs0-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-libs0-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-libs0-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-libs0-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-doc-5.6.0-4.3.2.noarch",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-hmac-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-hmac-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-hmac-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-hmac-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-ipsec-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-ipsec-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-ipsec-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-ipsec-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-libs0-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-libs0-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-libs0-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-libs0-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Package Hub 15:strongswan-nm-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15:strongswan-nm-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15:strongswan-nm-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15:strongswan-nm-5.6.0-4.3.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-11-25T16:30:01Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-16151"
    },
    {
      "cve": "CVE-2018-16152",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-16152"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c in the gmp plugin in strongSwan 4.x and 5.x before 5.7.0, the RSA implementation based on GMP does not reject excess data in the digestAlgorithm.parameters field during PKCS#1 v1.5 signature verification. Consequently, a remote attacker can forge signatures when small public exponents are being used, which could lead to impersonation when only an RSA signature is used for IKEv2 authentication. This is a variant of CVE-2006-4790 and CVE-2014-1568.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-5.6.0-4.3.2.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-5.6.0-4.3.2.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-5.6.0-4.3.2.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-5.6.0-4.3.2.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-doc-5.6.0-4.3.2.noarch",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-hmac-5.6.0-4.3.2.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-hmac-5.6.0-4.3.2.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-hmac-5.6.0-4.3.2.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-hmac-5.6.0-4.3.2.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-ipsec-5.6.0-4.3.2.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-ipsec-5.6.0-4.3.2.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-ipsec-5.6.0-4.3.2.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-ipsec-5.6.0-4.3.2.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-libs0-5.6.0-4.3.2.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-libs0-5.6.0-4.3.2.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-libs0-5.6.0-4.3.2.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-libs0-5.6.0-4.3.2.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-5.6.0-4.3.2.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-5.6.0-4.3.2.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-5.6.0-4.3.2.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-5.6.0-4.3.2.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-doc-5.6.0-4.3.2.noarch",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-hmac-5.6.0-4.3.2.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-hmac-5.6.0-4.3.2.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-hmac-5.6.0-4.3.2.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-hmac-5.6.0-4.3.2.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-ipsec-5.6.0-4.3.2.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-ipsec-5.6.0-4.3.2.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-ipsec-5.6.0-4.3.2.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-ipsec-5.6.0-4.3.2.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-libs0-5.6.0-4.3.2.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-libs0-5.6.0-4.3.2.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-libs0-5.6.0-4.3.2.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-libs0-5.6.0-4.3.2.x86_64",
          "SUSE Linux Enterprise Module for Package Hub 15:strongswan-nm-5.6.0-4.3.2.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15:strongswan-nm-5.6.0-4.3.2.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15:strongswan-nm-5.6.0-4.3.2.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15:strongswan-nm-5.6.0-4.3.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-16152",
          "url": "https://www.suse.com/security/cve/CVE-2018-16152"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1107874 for CVE-2018-16152",
          "url": "https://bugzilla.suse.com/1107874"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-doc-5.6.0-4.3.2.noarch",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-hmac-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-hmac-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-hmac-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-hmac-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-ipsec-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-ipsec-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-ipsec-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-ipsec-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-libs0-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-libs0-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-libs0-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-libs0-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-doc-5.6.0-4.3.2.noarch",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-hmac-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-hmac-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-hmac-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-hmac-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-ipsec-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-ipsec-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-ipsec-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-ipsec-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-libs0-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-libs0-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-libs0-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-libs0-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Package Hub 15:strongswan-nm-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15:strongswan-nm-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15:strongswan-nm-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15:strongswan-nm-5.6.0-4.3.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-doc-5.6.0-4.3.2.noarch",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-hmac-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-hmac-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-hmac-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-hmac-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-ipsec-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-ipsec-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-ipsec-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-ipsec-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-libs0-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-libs0-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-libs0-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-libs0-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-doc-5.6.0-4.3.2.noarch",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-hmac-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-hmac-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-hmac-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-hmac-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-ipsec-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-ipsec-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-ipsec-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-ipsec-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-libs0-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-libs0-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-libs0-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-libs0-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Package Hub 15:strongswan-nm-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15:strongswan-nm-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15:strongswan-nm-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15:strongswan-nm-5.6.0-4.3.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-11-25T16:30:01Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-16152"
    },
    {
      "cve": "CVE-2018-17540",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-17540"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The gmp plugin in strongSwan before 5.7.1 has a Buffer Overflow via a crafted certificate.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-5.6.0-4.3.2.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-5.6.0-4.3.2.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-5.6.0-4.3.2.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-5.6.0-4.3.2.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-doc-5.6.0-4.3.2.noarch",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-hmac-5.6.0-4.3.2.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-hmac-5.6.0-4.3.2.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-hmac-5.6.0-4.3.2.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-hmac-5.6.0-4.3.2.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-ipsec-5.6.0-4.3.2.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-ipsec-5.6.0-4.3.2.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-ipsec-5.6.0-4.3.2.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-ipsec-5.6.0-4.3.2.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-libs0-5.6.0-4.3.2.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-libs0-5.6.0-4.3.2.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-libs0-5.6.0-4.3.2.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-libs0-5.6.0-4.3.2.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-5.6.0-4.3.2.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-5.6.0-4.3.2.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-5.6.0-4.3.2.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-5.6.0-4.3.2.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-doc-5.6.0-4.3.2.noarch",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-hmac-5.6.0-4.3.2.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-hmac-5.6.0-4.3.2.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-hmac-5.6.0-4.3.2.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-hmac-5.6.0-4.3.2.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-ipsec-5.6.0-4.3.2.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-ipsec-5.6.0-4.3.2.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-ipsec-5.6.0-4.3.2.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-ipsec-5.6.0-4.3.2.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-libs0-5.6.0-4.3.2.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-libs0-5.6.0-4.3.2.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-libs0-5.6.0-4.3.2.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-libs0-5.6.0-4.3.2.x86_64",
          "SUSE Linux Enterprise Module for Package Hub 15:strongswan-nm-5.6.0-4.3.2.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15:strongswan-nm-5.6.0-4.3.2.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15:strongswan-nm-5.6.0-4.3.2.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15:strongswan-nm-5.6.0-4.3.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-17540",
          "url": "https://www.suse.com/security/cve/CVE-2018-17540"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1107874 for CVE-2018-17540",
          "url": "https://bugzilla.suse.com/1107874"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1109845 for CVE-2018-17540",
          "url": "https://bugzilla.suse.com/1109845"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-doc-5.6.0-4.3.2.noarch",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-hmac-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-hmac-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-hmac-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-hmac-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-ipsec-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-ipsec-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-ipsec-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-ipsec-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-libs0-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-libs0-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-libs0-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-libs0-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-doc-5.6.0-4.3.2.noarch",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-hmac-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-hmac-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-hmac-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-hmac-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-ipsec-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-ipsec-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-ipsec-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-ipsec-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-libs0-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-libs0-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-libs0-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-libs0-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Package Hub 15:strongswan-nm-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15:strongswan-nm-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15:strongswan-nm-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15:strongswan-nm-5.6.0-4.3.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-doc-5.6.0-4.3.2.noarch",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-hmac-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-hmac-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-hmac-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-hmac-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-ipsec-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-ipsec-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-ipsec-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-ipsec-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-libs0-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-libs0-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-libs0-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-libs0-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-doc-5.6.0-4.3.2.noarch",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-hmac-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-hmac-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-hmac-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-hmac-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-ipsec-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-ipsec-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-ipsec-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-ipsec-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-libs0-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-libs0-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-libs0-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-libs0-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Package Hub 15:strongswan-nm-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15:strongswan-nm-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15:strongswan-nm-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15:strongswan-nm-5.6.0-4.3.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-11-25T16:30:01Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-17540"
    },
    {
      "cve": "CVE-2018-5388",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-5388"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In stroke_socket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer underflow, which may lead to resource exhaustion and denial of service while reading from the socket.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-5.6.0-4.3.2.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-5.6.0-4.3.2.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-5.6.0-4.3.2.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-5.6.0-4.3.2.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-doc-5.6.0-4.3.2.noarch",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-hmac-5.6.0-4.3.2.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-hmac-5.6.0-4.3.2.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-hmac-5.6.0-4.3.2.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-hmac-5.6.0-4.3.2.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-ipsec-5.6.0-4.3.2.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-ipsec-5.6.0-4.3.2.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-ipsec-5.6.0-4.3.2.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-ipsec-5.6.0-4.3.2.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-libs0-5.6.0-4.3.2.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-libs0-5.6.0-4.3.2.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-libs0-5.6.0-4.3.2.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-libs0-5.6.0-4.3.2.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-5.6.0-4.3.2.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-5.6.0-4.3.2.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-5.6.0-4.3.2.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-5.6.0-4.3.2.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-doc-5.6.0-4.3.2.noarch",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-hmac-5.6.0-4.3.2.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-hmac-5.6.0-4.3.2.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-hmac-5.6.0-4.3.2.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-hmac-5.6.0-4.3.2.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-ipsec-5.6.0-4.3.2.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-ipsec-5.6.0-4.3.2.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-ipsec-5.6.0-4.3.2.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-ipsec-5.6.0-4.3.2.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-libs0-5.6.0-4.3.2.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-libs0-5.6.0-4.3.2.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-libs0-5.6.0-4.3.2.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15:strongswan-libs0-5.6.0-4.3.2.x86_64",
          "SUSE Linux Enterprise Module for Package Hub 15:strongswan-nm-5.6.0-4.3.2.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15:strongswan-nm-5.6.0-4.3.2.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15:strongswan-nm-5.6.0-4.3.2.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15:strongswan-nm-5.6.0-4.3.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-5388",
          "url": "https://www.suse.com/security/cve/CVE-2018-5388"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1094462 for CVE-2018-5388",
          "url": "https://bugzilla.suse.com/1094462"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1101792 for CVE-2018-5388",
          "url": "https://bugzilla.suse.com/1101792"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-doc-5.6.0-4.3.2.noarch",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-hmac-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-hmac-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-hmac-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-hmac-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-ipsec-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-ipsec-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-ipsec-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-ipsec-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-libs0-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-libs0-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-libs0-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-libs0-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-doc-5.6.0-4.3.2.noarch",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-hmac-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-hmac-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-hmac-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-hmac-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-ipsec-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-ipsec-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-ipsec-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-ipsec-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-libs0-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-libs0-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-libs0-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-libs0-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Package Hub 15:strongswan-nm-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15:strongswan-nm-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15:strongswan-nm-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15:strongswan-nm-5.6.0-4.3.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-doc-5.6.0-4.3.2.noarch",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-hmac-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-hmac-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-hmac-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-hmac-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-ipsec-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-ipsec-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-ipsec-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-ipsec-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-libs0-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-libs0-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-libs0-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:strongswan-libs0-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-doc-5.6.0-4.3.2.noarch",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-hmac-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-hmac-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-hmac-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-hmac-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-ipsec-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-ipsec-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-ipsec-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-ipsec-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-libs0-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-libs0-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-libs0-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15:strongswan-libs0-5.6.0-4.3.2.x86_64",
            "SUSE Linux Enterprise Module for Package Hub 15:strongswan-nm-5.6.0-4.3.2.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15:strongswan-nm-5.6.0-4.3.2.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15:strongswan-nm-5.6.0-4.3.2.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15:strongswan-nm-5.6.0-4.3.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-11-25T16:30:01Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-5388"
    }
  ]
}

CVE-2018-5388 (GCVE-0-2018-5388)

Vulnerability from cvelistv5

Published

2018-05-31 00:00

Modified

2024-08-05 05:33

Severity ?

CWE

CWE-124

Summary

In stroke_socket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer underflow, which may lead to resource exhaustion and denial of service while reading from the socket.

References

URL

Tags

	http://www.kb.cert.org/vuls/id/338343	third-party-advisory
	https://security.gentoo.org/glsa/201811-16	vendor-advisory
	https://git.strongswan.org/?p=strongswan.git%3Ba=commitdiff%3Bh=0acd1ab4
	http://www.securityfocus.com/bid/104263	vdb-entry
	https://usn.ubuntu.com/3771-1/	vendor-advisory
	https://www.debian.org/security/2018/dsa-4229	vendor-advisory
	http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00077.html	vendor-advisory
	http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00001.html	vendor-advisory
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00047.html	vendor-advisory
	http://packetstormsecurity.com/files/172833/strongSwan-VPN-Charon-Server-Buffer-Overflow.html

Impacted products

	Vendor	Product	Version
	strongSwan	strongSwan	Version: 5.6.3 < 5.6.3

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T05:33:44.315Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "VU#338343",
            "tags": [
              "third-party-advisory",
              "x_transferred"
            ],
            "url": "http://www.kb.cert.org/vuls/id/338343"
          },
          {
            "name": "GLSA-201811-16",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201811-16"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.strongswan.org/?p=strongswan.git%3Ba=commitdiff%3Bh=0acd1ab4"
          },
          {
            "name": "104263",
            "tags": [
              "vdb-entry",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104263"
          },
          {
            "name": "USN-3771-1",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3771-1/"
          },
          {
            "name": "DSA-4229",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4229"
          },
          {
            "name": "openSUSE-SU-2019:2594",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00077.html"
          },
          {
            "name": "openSUSE-SU-2019:2598",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00001.html"
          },
          {
            "name": "openSUSE-SU-2020:0403",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00047.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/172833/strongSwan-VPN-Charon-Server-Buffer-Overflow.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "strongSwan",
          "vendor": "strongSwan",
          "versions": [
            {
              "lessThan": "5.6.3",
              "status": "affected",
              "version": "5.6.3",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Thanks to Kevin Backhouse for reporting this vulnerability."
        }
      ],
      "datePublic": "2018-05-22T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In stroke_socket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer underflow, which may lead to resource exhaustion and denial of service while reading from the socket."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-124",
              "description": "CWE-124",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-06-12T00:00:00",
        "orgId": "37e5125f-f79b-445b-8fad-9564f167944b",
        "shortName": "certcc"
      },
      "references": [
        {
          "name": "VU#338343",
          "tags": [
            "third-party-advisory"
          ],
          "url": "http://www.kb.cert.org/vuls/id/338343"
        },
        {
          "name": "GLSA-201811-16",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/201811-16"
        },
        {
          "url": "https://git.strongswan.org/?p=strongswan.git%3Ba=commitdiff%3Bh=0acd1ab4"
        },
        {
          "name": "104263",
          "tags": [
            "vdb-entry"
          ],
          "url": "http://www.securityfocus.com/bid/104263"
        },
        {
          "name": "USN-3771-1",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://usn.ubuntu.com/3771-1/"
        },
        {
          "name": "DSA-4229",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4229"
        },
        {
          "name": "openSUSE-SU-2019:2594",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00077.html"
        },
        {
          "name": "openSUSE-SU-2019:2598",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00001.html"
        },
        {
          "name": "openSUSE-SU-2020:0403",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00047.html"
        },
        {
          "url": "http://packetstormsecurity.com/files/172833/strongSwan-VPN-Charon-Server-Buffer-Overflow.html"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b",
    "assignerShortName": "certcc",
    "cveId": "CVE-2018-5388",
    "datePublished": "2018-05-31T00:00:00",
    "dateReserved": "2018-01-12T00:00:00",
    "dateUpdated": "2024-08-05T05:33:44.315Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-10811 (GCVE-0-2018-10811)

Vulnerability from cvelistv5

Published

2018-06-19 21:00

Modified

2024-08-05 07:46

Severity ?

CWE

Summary

strongSwan 5.6.0 and older allows Remote Denial of Service because of Missing Initialization of a Variable.

References

URL

Tags

	https://security.gentoo.org/glsa/201811-16	vendor-advisory, x_refsource_GENTOO
	https://www.strongswan.org/blog/2018/05/28/strongswan-vulnerability-%28cve-2018-10811%29.html	x_refsource_CONFIRM
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UBO6ZQKLB5RY3TV7MXADFTQKXA2LUEIL/	vendor-advisory, x_refsource_FEDORA
	https://download.strongswan.org/security/CVE-2018-10811/	x_refsource_CONFIRM
	https://usn.ubuntu.com/3771-1/	vendor-advisory, x_refsource_UBUNTU
	https://www.debian.org/security/2018/dsa-4229	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00077.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00001.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00047.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T07:46:47.452Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "GLSA-201811-16",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201811-16"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.strongswan.org/blog/2018/05/28/strongswan-vulnerability-%28cve-2018-10811%29.html"
          },
          {
            "name": "FEDORA-2018-0de3edbdea",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UBO6ZQKLB5RY3TV7MXADFTQKXA2LUEIL/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://download.strongswan.org/security/CVE-2018-10811/"
          },
          {
            "name": "USN-3771-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3771-1/"
          },
          {
            "name": "DSA-4229",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4229"
          },
          {
            "name": "openSUSE-SU-2019:2594",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00077.html"
          },
          {
            "name": "openSUSE-SU-2019:2598",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00001.html"
          },
          {
            "name": "openSUSE-SU-2020:0403",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00047.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-06-14T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "strongSwan 5.6.0 and older allows Remote Denial of Service because of Missing Initialization of a Variable."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-30T00:06:03",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "GLSA-201811-16",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201811-16"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.strongswan.org/blog/2018/05/28/strongswan-vulnerability-%28cve-2018-10811%29.html"
        },
        {
          "name": "FEDORA-2018-0de3edbdea",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UBO6ZQKLB5RY3TV7MXADFTQKXA2LUEIL/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://download.strongswan.org/security/CVE-2018-10811/"
        },
        {
          "name": "USN-3771-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3771-1/"
        },
        {
          "name": "DSA-4229",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4229"
        },
        {
          "name": "openSUSE-SU-2019:2594",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00077.html"
        },
        {
          "name": "openSUSE-SU-2019:2598",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00001.html"
        },
        {
          "name": "openSUSE-SU-2020:0403",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00047.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-10811",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "strongSwan 5.6.0 and older allows Remote Denial of Service because of Missing Initialization of a Variable."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "GLSA-201811-16",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201811-16"
            },
            {
              "name": "https://www.strongswan.org/blog/2018/05/28/strongswan-vulnerability-(cve-2018-10811).html",
              "refsource": "CONFIRM",
              "url": "https://www.strongswan.org/blog/2018/05/28/strongswan-vulnerability-(cve-2018-10811).html"
            },
            {
              "name": "FEDORA-2018-0de3edbdea",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UBO6ZQKLB5RY3TV7MXADFTQKXA2LUEIL/"
            },
            {
              "name": "https://download.strongswan.org/security/CVE-2018-10811/",
              "refsource": "CONFIRM",
              "url": "https://download.strongswan.org/security/CVE-2018-10811/"
            },
            {
              "name": "USN-3771-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3771-1/"
            },
            {
              "name": "DSA-4229",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4229"
            },
            {
              "name": "openSUSE-SU-2019:2594",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00077.html"
            },
            {
              "name": "openSUSE-SU-2019:2598",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00001.html"
            },
            {
              "name": "openSUSE-SU-2020:0403",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00047.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-10811",
    "datePublished": "2018-06-19T21:00:00",
    "dateReserved": "2018-05-08T00:00:00",
    "dateUpdated": "2024-08-05T07:46:47.452Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-16152 (GCVE-0-2018-16152)

Vulnerability from cvelistv5

Published

2018-09-26 21:00

Modified

2024-08-05 10:17

Severity ?

CWE

Summary

In verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c in the gmp plugin in strongSwan 4.x and 5.x before 5.7.0, the RSA implementation based on GMP does not reject excess data in the digestAlgorithm.parameters field during PKCS#1 v1.5 signature verification. Consequently, a remote attacker can forge signatures when small public exponents are being used, which could lead to impersonation when only an RSA signature is used for IKEv2 authentication. This is a variant of CVE-2006-4790 and CVE-2014-1568.

References

URL

Tags

	https://www.debian.org/security/2018/dsa-4305	vendor-advisory, x_refsource_DEBIAN
	https://security.gentoo.org/glsa/201811-16	vendor-advisory, x_refsource_GENTOO
	https://www.strongswan.org/blog/2018/09/24/strongswan-vulnerability-%28cve-2018-16151%2C-cve-2018-16152%29.html	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2018/09/msg00032.html	mailing-list, x_refsource_MLIST
	https://usn.ubuntu.com/3771-1/	vendor-advisory, x_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00077.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00001.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00047.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T10:17:38.160Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-4305",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4305"
          },
          {
            "name": "GLSA-201811-16",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201811-16"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.strongswan.org/blog/2018/09/24/strongswan-vulnerability-%28cve-2018-16151%2C-cve-2018-16152%29.html"
          },
          {
            "name": "[debian-lts-announce] 20180926 [SECURITY] [DLA 1522-1] strongswan security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00032.html"
          },
          {
            "name": "USN-3771-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3771-1/"
          },
          {
            "name": "openSUSE-SU-2019:2594",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00077.html"
          },
          {
            "name": "openSUSE-SU-2019:2598",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00001.html"
          },
          {
            "name": "openSUSE-SU-2020:0403",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00047.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-09-24T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c in the gmp plugin in strongSwan 4.x and 5.x before 5.7.0, the RSA implementation based on GMP does not reject excess data in the digestAlgorithm.parameters field during PKCS#1 v1.5 signature verification. Consequently, a remote attacker can forge signatures when small public exponents are being used, which could lead to impersonation when only an RSA signature is used for IKEv2 authentication. This is a variant of CVE-2006-4790 and CVE-2014-1568."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-30T00:06:05",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "DSA-4305",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4305"
        },
        {
          "name": "GLSA-201811-16",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201811-16"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.strongswan.org/blog/2018/09/24/strongswan-vulnerability-%28cve-2018-16151%2C-cve-2018-16152%29.html"
        },
        {
          "name": "[debian-lts-announce] 20180926 [SECURITY] [DLA 1522-1] strongswan security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00032.html"
        },
        {
          "name": "USN-3771-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3771-1/"
        },
        {
          "name": "openSUSE-SU-2019:2594",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00077.html"
        },
        {
          "name": "openSUSE-SU-2019:2598",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00001.html"
        },
        {
          "name": "openSUSE-SU-2020:0403",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00047.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-16152",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c in the gmp plugin in strongSwan 4.x and 5.x before 5.7.0, the RSA implementation based on GMP does not reject excess data in the digestAlgorithm.parameters field during PKCS#1 v1.5 signature verification. Consequently, a remote attacker can forge signatures when small public exponents are being used, which could lead to impersonation when only an RSA signature is used for IKEv2 authentication. This is a variant of CVE-2006-4790 and CVE-2014-1568."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-4305",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4305"
            },
            {
              "name": "GLSA-201811-16",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201811-16"
            },
            {
              "name": "https://www.strongswan.org/blog/2018/09/24/strongswan-vulnerability-(cve-2018-16151,-cve-2018-16152).html",
              "refsource": "CONFIRM",
              "url": "https://www.strongswan.org/blog/2018/09/24/strongswan-vulnerability-(cve-2018-16151,-cve-2018-16152).html"
            },
            {
              "name": "[debian-lts-announce] 20180926 [SECURITY] [DLA 1522-1] strongswan security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00032.html"
            },
            {
              "name": "USN-3771-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3771-1/"
            },
            {
              "name": "openSUSE-SU-2019:2594",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00077.html"
            },
            {
              "name": "openSUSE-SU-2019:2598",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00001.html"
            },
            {
              "name": "openSUSE-SU-2020:0403",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00047.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-16152",
    "datePublished": "2018-09-26T21:00:00",
    "dateReserved": "2018-08-29T00:00:00",
    "dateUpdated": "2024-08-05T10:17:38.160Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-17540 (GCVE-0-2018-17540)

Vulnerability from cvelistv5

Published

2018-10-03 20:00

Modified

2024-08-05 10:54

Severity ?

CWE

Summary

The gmp plugin in strongSwan before 5.7.1 has a Buffer Overflow via a crafted certificate.

References

URL

Tags

	https://www.debian.org/security/2018/dsa-4309	vendor-advisory, x_refsource_DEBIAN
	https://lists.debian.org/debian-lts-announce/2018/10/msg00001.html	mailing-list, x_refsource_MLIST
	https://www.strongswan.org/blog/2018/10/01/strongswan-vulnerability-%28cve-2018-17540%29.html	x_refsource_CONFIRM
	https://usn.ubuntu.com/3774-1/	vendor-advisory, x_refsource_UBUNTU
	https://download.strongswan.org/security/CVE-2018-17540/	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201811-16	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00077.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00001.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00047.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T10:54:09.248Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-4309",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4309"
          },
          {
            "name": "[debian-lts-announce] 20181002 [SECURITY] [DLA 1528-1] strongswan security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/10/msg00001.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.strongswan.org/blog/2018/10/01/strongswan-vulnerability-%28cve-2018-17540%29.html"
          },
          {
            "name": "USN-3774-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3774-1/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://download.strongswan.org/security/CVE-2018-17540/"
          },
          {
            "name": "GLSA-201811-16",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201811-16"
          },
          {
            "name": "openSUSE-SU-2019:2594",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00077.html"
          },
          {
            "name": "openSUSE-SU-2019:2598",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00001.html"
          },
          {
            "name": "openSUSE-SU-2020:0403",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00047.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-10-01T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The gmp plugin in strongSwan before 5.7.1 has a Buffer Overflow via a crafted certificate."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-30T00:06:03",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "DSA-4309",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4309"
        },
        {
          "name": "[debian-lts-announce] 20181002 [SECURITY] [DLA 1528-1] strongswan security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/10/msg00001.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.strongswan.org/blog/2018/10/01/strongswan-vulnerability-%28cve-2018-17540%29.html"
        },
        {
          "name": "USN-3774-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3774-1/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://download.strongswan.org/security/CVE-2018-17540/"
        },
        {
          "name": "GLSA-201811-16",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201811-16"
        },
        {
          "name": "openSUSE-SU-2019:2594",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00077.html"
        },
        {
          "name": "openSUSE-SU-2019:2598",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00001.html"
        },
        {
          "name": "openSUSE-SU-2020:0403",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00047.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-17540",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The gmp plugin in strongSwan before 5.7.1 has a Buffer Overflow via a crafted certificate."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-4309",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4309"
            },
            {
              "name": "[debian-lts-announce] 20181002 [SECURITY] [DLA 1528-1] strongswan security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/10/msg00001.html"
            },
            {
              "name": "https://www.strongswan.org/blog/2018/10/01/strongswan-vulnerability-(cve-2018-17540).html",
              "refsource": "CONFIRM",
              "url": "https://www.strongswan.org/blog/2018/10/01/strongswan-vulnerability-(cve-2018-17540).html"
            },
            {
              "name": "USN-3774-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3774-1/"
            },
            {
              "name": "https://download.strongswan.org/security/CVE-2018-17540/",
              "refsource": "CONFIRM",
              "url": "https://download.strongswan.org/security/CVE-2018-17540/"
            },
            {
              "name": "GLSA-201811-16",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201811-16"
            },
            {
              "name": "openSUSE-SU-2019:2594",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00077.html"
            },
            {
              "name": "openSUSE-SU-2019:2598",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00001.html"
            },
            {
              "name": "openSUSE-SU-2020:0403",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00047.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-17540",
    "datePublished": "2018-10-03T20:00:00",
    "dateReserved": "2018-09-26T00:00:00",
    "dateUpdated": "2024-08-05T10:54:09.248Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-16151 (GCVE-0-2018-16151)

Vulnerability from cvelistv5

Published

2018-09-26 21:00

Modified

2024-08-05 10:17

Severity ?

CWE

Summary

In verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c in the gmp plugin in strongSwan 4.x and 5.x before 5.7.0, the RSA implementation based on GMP does not reject excess data after the encoded algorithm OID during PKCS#1 v1.5 signature verification. Similar to the flaw in the same version of strongSwan regarding digestAlgorithm.parameters, a remote attacker can forge signatures when small public exponents are being used, which could lead to impersonation when only an RSA signature is used for IKEv2 authentication.

References

URL

Tags

	https://www.debian.org/security/2018/dsa-4305	vendor-advisory, x_refsource_DEBIAN
	https://security.gentoo.org/glsa/201811-16	vendor-advisory, x_refsource_GENTOO
	https://www.strongswan.org/blog/2018/09/24/strongswan-vulnerability-%28cve-2018-16151%2C-cve-2018-16152%29.html	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2018/09/msg00032.html	mailing-list, x_refsource_MLIST
	https://usn.ubuntu.com/3771-1/	vendor-advisory, x_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00077.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00001.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00047.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T10:17:37.623Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-4305",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4305"
          },
          {
            "name": "GLSA-201811-16",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201811-16"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.strongswan.org/blog/2018/09/24/strongswan-vulnerability-%28cve-2018-16151%2C-cve-2018-16152%29.html"
          },
          {
            "name": "[debian-lts-announce] 20180926 [SECURITY] [DLA 1522-1] strongswan security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00032.html"
          },
          {
            "name": "USN-3771-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3771-1/"
          },
          {
            "name": "openSUSE-SU-2019:2594",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00077.html"
          },
          {
            "name": "openSUSE-SU-2019:2598",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00001.html"
          },
          {
            "name": "openSUSE-SU-2020:0403",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00047.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-09-24T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c in the gmp plugin in strongSwan 4.x and 5.x before 5.7.0, the RSA implementation based on GMP does not reject excess data after the encoded algorithm OID during PKCS#1 v1.5 signature verification. Similar to the flaw in the same version of strongSwan regarding digestAlgorithm.parameters, a remote attacker can forge signatures when small public exponents are being used, which could lead to impersonation when only an RSA signature is used for IKEv2 authentication."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-30T00:06:04",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "DSA-4305",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4305"
        },
        {
          "name": "GLSA-201811-16",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201811-16"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.strongswan.org/blog/2018/09/24/strongswan-vulnerability-%28cve-2018-16151%2C-cve-2018-16152%29.html"
        },
        {
          "name": "[debian-lts-announce] 20180926 [SECURITY] [DLA 1522-1] strongswan security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00032.html"
        },
        {
          "name": "USN-3771-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3771-1/"
        },
        {
          "name": "openSUSE-SU-2019:2594",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00077.html"
        },
        {
          "name": "openSUSE-SU-2019:2598",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00001.html"
        },
        {
          "name": "openSUSE-SU-2020:0403",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00047.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-16151",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c in the gmp plugin in strongSwan 4.x and 5.x before 5.7.0, the RSA implementation based on GMP does not reject excess data after the encoded algorithm OID during PKCS#1 v1.5 signature verification. Similar to the flaw in the same version of strongSwan regarding digestAlgorithm.parameters, a remote attacker can forge signatures when small public exponents are being used, which could lead to impersonation when only an RSA signature is used for IKEv2 authentication."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-4305",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4305"
            },
            {
              "name": "GLSA-201811-16",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201811-16"
            },
            {
              "name": "https://www.strongswan.org/blog/2018/09/24/strongswan-vulnerability-(cve-2018-16151,-cve-2018-16152).html",
              "refsource": "CONFIRM",
              "url": "https://www.strongswan.org/blog/2018/09/24/strongswan-vulnerability-(cve-2018-16151,-cve-2018-16152).html"
            },
            {
              "name": "[debian-lts-announce] 20180926 [SECURITY] [DLA 1522-1] strongswan security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00032.html"
            },
            {
              "name": "USN-3771-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3771-1/"
            },
            {
              "name": "openSUSE-SU-2019:2594",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00077.html"
            },
            {
              "name": "openSUSE-SU-2019:2598",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00001.html"
            },
            {
              "name": "openSUSE-SU-2020:0403",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00047.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-16151",
    "datePublished": "2018-09-26T21:00:00",
    "dateReserved": "2018-08-29T00:00:00",
    "dateUpdated": "2024-08-05T10:17:37.623Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

suse-su-2019:3056-1

Vulnerability from csaf_suse

CVE-2018-5388 (GCVE-0-2018-5388)

Vulnerability from cvelistv5

CVE-2018-10811 (GCVE-0-2018-10811)

Vulnerability from cvelistv5

CVE-2018-16152 (GCVE-0-2018-16152)

Vulnerability from cvelistv5

CVE-2018-17540 (GCVE-0-2018-17540)

Vulnerability from cvelistv5

CVE-2018-16151 (GCVE-0-2018-16151)

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature