Security update for strongswan SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2015:1227-1 Final 1 1 2014-05-14T09:26:44Z current 2014-05-14T09:26:44Z 2014-05-14T09:26:44Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for strongswan This update fixes a NULL ptr dereference (DoS) via ID_DER_ASN1_DN ID payloads. Security Issue reference: * CVE-2014-2891 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2891> The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). sledsp3-strongswan,slessp3-strongswan Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2015/suse-su-20151227-1/ Link for SUSE-SU-2015:1227-1 https://lists.suse.com/pipermail/sle-security-updates/2015-July/001492.html E-Mail link for SUSE-SU-2015:1227-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/815236 SUSE Bug 815236 https://bugzilla.suse.com/833278 SUSE Bug 833278 https://bugzilla.suse.com/840826 SUSE Bug 840826 https://bugzilla.suse.com/847506 SUSE Bug 847506 https://bugzilla.suse.com/870572 SUSE Bug 870572 https://bugzilla.suse.com/876449 SUSE Bug 876449 https://bugzilla.suse.com/933591 SUSE Bug 933591 https://www.suse.com/security/cve/CVE-2013-2944/ SUSE CVE CVE-2013-2944 page https://www.suse.com/security/cve/CVE-2013-5018/ SUSE CVE CVE-2013-5018 page https://www.suse.com/security/cve/CVE-2014-2338/ SUSE CVE CVE-2014-2338 page https://www.suse.com/security/cve/CVE-2014-2891/ SUSE CVE CVE-2014-2891 page https://www.suse.com/security/cve/CVE-2015-4171/ SUSE CVE CVE-2015-4171 page SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3-TERADATA SUSE Linux Enterprise Server for SAP Applications 11 SP3 strongswan-4.4.0-6.25.1 strongswan-doc-4.4.0-6.25.1 strongswan-4.4.0-6.25.1 as a component of SUSE Linux Enterprise Desktop 11 SP3 strongswan-doc-4.4.0-6.25.1 as a component of SUSE Linux Enterprise Desktop 11 SP3 strongswan-4.4.0-6.25.1 as a component of SUSE Linux Enterprise Server 11 SP3 strongswan-doc-4.4.0-6.25.1 as a component of SUSE Linux Enterprise Server 11 SP3 strongswan-4.4.0-6.25.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA strongswan-doc-4.4.0-6.25.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA strongswan-4.4.0-6.25.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 strongswan-doc-4.4.0-6.25.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 strongSwan 4.3.5 through 5.0.3, when using the OpenSSL plugin for ECDSA signature verification, allows remote attackers to authenticate as other users via an invalid signature. CVE-2013-2944 SUSE Linux Enterprise Desktop 11 SP3:strongswan-4.4.0-6.25.1 SUSE Linux Enterprise Desktop 11 SP3:strongswan-doc-4.4.0-6.25.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:strongswan-4.4.0-6.25.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:strongswan-doc-4.4.0-6.25.1 SUSE Linux Enterprise Server 11 SP3:strongswan-4.4.0-6.25.1 SUSE Linux Enterprise Server 11 SP3:strongswan-doc-4.4.0-6.25.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:strongswan-4.4.0-6.25.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:strongswan-doc-4.4.0-6.25.1 moderate 4.9 AV:N/AC:M/Au:S/C:P/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151227-1/ https://www.suse.com/security/cve/CVE-2013-2944.html CVE-2013-2944 https://bugzilla.suse.com/815236 SUSE Bug 815236 The is_asn1 function in strongSwan 4.1.11 through 5.0.4 does not properly validate the return value of the asn1_length function, which allows remote attackers to cause a denial of service (segmentation fault) via a (1) XAuth username, (2) EAP identity, or (3) PEM encoded file that starts with a 0x04, 0x30, or 0x31 character followed by an ASN.1 length value that triggers an integer overflow. CVE-2013-5018 SUSE Linux Enterprise Desktop 11 SP3:strongswan-4.4.0-6.25.1 SUSE Linux Enterprise Desktop 11 SP3:strongswan-doc-4.4.0-6.25.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:strongswan-4.4.0-6.25.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:strongswan-doc-4.4.0-6.25.1 SUSE Linux Enterprise Server 11 SP3:strongswan-4.4.0-6.25.1 SUSE Linux Enterprise Server 11 SP3:strongswan-doc-4.4.0-6.25.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:strongswan-4.4.0-6.25.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:strongswan-doc-4.4.0-6.25.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151227-1/ https://www.suse.com/security/cve/CVE-2013-5018.html CVE-2013-5018 https://bugzilla.suse.com/833278 SUSE Bug 833278 IKEv2 in strongSwan 4.0.7 before 5.1.3 allows remote attackers to bypass authentication by rekeying an IKE_SA during (1) initiation or (2) re-authentication, which triggers the IKE_SA state to be set to established. CVE-2014-2338 SUSE Linux Enterprise Desktop 11 SP3:strongswan-4.4.0-6.25.1 SUSE Linux Enterprise Desktop 11 SP3:strongswan-doc-4.4.0-6.25.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:strongswan-4.4.0-6.25.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:strongswan-doc-4.4.0-6.25.1 SUSE Linux Enterprise Server 11 SP3:strongswan-4.4.0-6.25.1 SUSE Linux Enterprise Server 11 SP3:strongswan-doc-4.4.0-6.25.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:strongswan-4.4.0-6.25.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:strongswan-doc-4.4.0-6.25.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151227-1/ https://www.suse.com/security/cve/CVE-2014-2338.html CVE-2014-2338 https://bugzilla.suse.com/870572 SUSE Bug 870572 strongSwan before 5.1.2 allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon crash) via a crafted ID_DER_ASN1_DN ID payload. CVE-2014-2891 SUSE Linux Enterprise Desktop 11 SP3:strongswan-4.4.0-6.25.1 SUSE Linux Enterprise Desktop 11 SP3:strongswan-doc-4.4.0-6.25.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:strongswan-4.4.0-6.25.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:strongswan-doc-4.4.0-6.25.1 SUSE Linux Enterprise Server 11 SP3:strongswan-4.4.0-6.25.1 SUSE Linux Enterprise Server 11 SP3:strongswan-doc-4.4.0-6.25.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:strongswan-4.4.0-6.25.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:strongswan-doc-4.4.0-6.25.1 moderate 7.8 AV:N/AC:L/Au:N/C:N/I:N/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151227-1/ https://www.suse.com/security/cve/CVE-2014-2891.html CVE-2014-2891 https://bugzilla.suse.com/876449 SUSE Bug 876449 strongSwan 4.3.0 through 5.x before 5.3.2 and strongSwan VPN Client before 1.4.6, when using EAP or pre-shared keys for authenticating an IKEv2 connection, does not enforce server authentication restrictions until the entire authentication process is complete, which allows remote servers to obtain credentials by using a valid certificate and then reading the responses. CVE-2015-4171 SUSE Linux Enterprise Desktop 11 SP3:strongswan-4.4.0-6.25.1 SUSE Linux Enterprise Desktop 11 SP3:strongswan-doc-4.4.0-6.25.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:strongswan-4.4.0-6.25.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:strongswan-doc-4.4.0-6.25.1 SUSE Linux Enterprise Server 11 SP3:strongswan-4.4.0-6.25.1 SUSE Linux Enterprise Server 11 SP3:strongswan-doc-4.4.0-6.25.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:strongswan-4.4.0-6.25.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:strongswan-doc-4.4.0-6.25.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151227-1/ https://www.suse.com/security/cve/CVE-2015-4171.html CVE-2015-4171 https://bugzilla.suse.com/931845 SUSE Bug 931845 https://bugzilla.suse.com/933591 SUSE Bug 933591