Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
strongSwan 4.2.6 and earlier allows remote attackers to cause a denial of service (daemon crash) via an IKE_SA_INIT message with a large number of NULL values in a Key Exchange payload, which triggers a NULL pointer dereference for the return value of the mpz_export function in the GNU Multiprecision Library (GMP).
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Linux strongSwan mpz_export()函数远程拒绝服务漏洞
Vulnerability Description
strongSwan是瑞士软件开发者Andreas Steffen所维护的一套Linux平台使用的开源的基于IPsec的VPN解决方案。该方案包含X.509公开密钥证书、安全储存私钥、智能卡等认证机制。 strongSwan引用了GMP库的mpz_export()函数所返回的空指针，如果用户所发送的IKE_SA_INIT消息的Key Exchange负载包含有大量NULL值的话，就会导致IKEv2 charon守护程序崩溃。
CVSS Information
N/A
Vulnerability Type
N/A