Issue metadata
Sign in to add a comment
|
CrOS: Vulnerability reported in net-vpn/strongswan |
||||||||||||||||||||||
Issue descriptionAutomated analysis has detected that the following third party packages have had vulnerabilities publicly reported. NOTE: There may be several bugs listed below - in almost all cases, all bugs can be quickly addressed by upgrading to the latest version of the package. Package Name: net-vpn/strongswan Package Version: [cpe:/a:strongswan:strongswan:5.5.3] Advisory: CVE-2017-11185 Details: https://vomit.googleplex.com/advisory?id=CVE/CVE-2017-11185 CVSS severity score: 5/10.0 Confidence: high Description: The gmp plugin in strongSwan before 5.6.0 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted RSA signature.
,
Aug 28 2017
,
Aug 29 2017
,
Aug 29 2017
,
Sep 9 2017
The following revision refers to this bug: https://chromium.googlesource.com/chromiumos/overlays/chromiumos-overlay/+/8f604600ea58e40aa0165153610f4f08a2d69640 commit 8f604600ea58e40aa0165153610f4f08a2d69640 Author: Kevin Cernekee <cernekee@chromium.org> Date: Sat Sep 09 00:36:18 2017 net-vpn/strongswan: Add upstream patch for CVE-2017-11185 This was cherry-picked on top of strongSwan 5.5.3. BUG= chromium:759288 TEST=buildbots Change-Id: I7651217893781f1e98f3ff5f2417422600f6a1b3 Reviewed-on: https://chromium-review.googlesource.com/657810 Commit-Ready: Kevin Cernekee <cernekee@chromium.org> Tested-by: Kevin Cernekee <cernekee@chromium.org> Reviewed-by: Mike Frysinger <vapier@chromium.org> [modify] https://crrev.com/8f604600ea58e40aa0165153610f4f08a2d69640/net-vpn/strongswan/strongswan-5.5.3.ebuild [add] https://crrev.com/8f604600ea58e40aa0165153610f4f08a2d69640/net-vpn/strongswan/files/strongswan-5.5.3-fix-cve-2017-11185.patch [rename] https://crrev.com/8f604600ea58e40aa0165153610f4f08a2d69640/net-vpn/strongswan/strongswan-5.5.3-r2.ebuild
,
Sep 9 2017
,
Sep 9 2017
,
Dec 16 2017
This bug has been closed for more than 14 weeks. Removing security view restrictions. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
,
Jan 22 2018
,
Jan 23 2018
|
|||||||||||||||||||||||
►
Sign in to add a comment |
|||||||||||||||||||||||
Comment 1 by ta...@google.com
, Aug 28 2017Labels: Security_Severity-Medium Security_Impact-Stable
Owner: vapier@chromium.org
Status: Assigned (was: Untriaged)