CVE-2017-11185

High

Published: 18/08/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The gmp plugin in strongSwan before 5.6.0 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted RSA signature.

Risk Assessment

Attackers can exploit this vulnerability to disrupt the VPN service, potentially leading to downtime and loss of user trust.

Recommendation

It is recommended to upgrade strongSwan to version 5.6.0 or later to mitigate this vulnerability.

Other vulnerabilities in strongSwan gmp plugin

CVE-2017-9022High
The gmp plugin in strongSwan before 5.5.3 does not properly validate RSA public keys before calling mpz_powm_sec, allowing remote peers to cause a denial of service (floating point exception and process crash) via a crafted certificate.

Original NVD description (English source)

The gmp plugin in strongSwan before 5.6.0 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted RSA signature.