Log in Start free

Vulnerability · Published Oct 18, 2021 · Assigned by mitre

CVE-2021-41991

High 7.5

In plain English

A high-severity security flaw in the strongswan package (Alpine). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 5.3% (higher than 93% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)7.5High
Exploit odds (30 days)5.3%top 7.4% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests with different certificates to fill the cache and later trigger the replacement of cache entries. The code attempts to select a less-often-used cache entry by means of a random number generator, but this is not done correctly. Remote code execution might be a slight possibility.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Alpine:v3.20strongswan5.9.1-r3ALPINE-CVE-2021-41991
Alpine:v3.21strongswan5.9.1-r3ALPINE-CVE-2021-41991
Alpine:v3.22strongswan5.9.1-r3ALPINE-CVE-2021-41991
Alpine:v3.23strongswan5.9.1-r3ALPINE-CVE-2021-41991
Alpine:v3.24strongswan5.9.1-r3ALPINE-CVE-2021-41991
Debian:12strongswan5.9.4-1DEBIAN-CVE-2021-41991
Debian:13strongswan5.9.4-1DEBIAN-CVE-2021-41991
Debian:14strongswan5.9.4-1DEBIAN-CVE-2021-41991
Ubuntu:22.04:LTSstrongswan5.9.1-1ubuntu3.1UBUNTU-CVE-2021-41991

Affected products (as reported)

VendorProductVersions
n/a n/a n/a

References