denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

NEWS: Add info about CVE-2018-10811

Browse Source
This commit is contained in:
Tobias Brunner
2018-05-24 15:52:06 +02:00
parent 6d8a57342b
commit 64f7fd92c0
1 changed files with 5 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
NEWS
+5 -1
View File
@@ -1,7 +1,11 @@
strongswan-5.6.3 strongswan-5.6.3
---------------- ----------------
- Fixes a vulnerability in the stroke plugin, which did not check the received - Fixed a DoS vulnerability in the IKEv2 key derivation if the openssl plugin is
used in FIPS mode and HMAC-MD5 is negotiated as PRF.
This vulnerability has been registered as CVE-2018-10811.
- Fixed a vulnerability in the stroke plugin, which did not check the received
length before reading a message from the socket. Unless a group is configured, length before reading a message from the socket. Unless a group is configured,
root privileges are required to access that socket, so in the default root privileges are required to access that socket, so in the default
configuration this shouldn't be an issue. configuration this shouldn't be an issue.