CVE-2021-41990: Integer Overflow
First published: Mon Oct 18 2021(Updated: )
The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate with an RSASSA-PSS signature. For example, this can be triggered by an unrelated self-signed CA certificate sent by an initiator. Remote code execution cannot occur.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| debian/strongswan | 5.7.2-1+deb10u2 5.7.2-1+deb10u3 5.9.1-1+deb11u3 5.9.8-5 5.9.11-1 | |
| Strongswan Strongswan | >=5.6.1<5.9.4 | |
| Debian Debian Linux | =10.0 | |
| Debian Debian Linux | =11.0 | |
| Fedoraproject Fedora | =33 | |
| Fedoraproject Fedora | =34 | |
| Fedoraproject Fedora | =35 | |
| Siemens 6gk6108-4am00-2ba2 Firmware | ||
| Siemens 6gk6108-4am00-2ba2 | ||
| Siemens 6gk6108-4am00-2da2 Firmware | ||
| Siemens 6gk6108-4am00-2da2 | ||
| Siemens 6gk5804-0ap00-2aa2 Firmware | ||
| Siemens 6gk5804-0ap00-2aa2 | ||
| Siemens 6gk5812-1aa00-2aa2 Firmware | ||
| Siemens 6gk5812-1aa00-2aa2 | ||
| Siemens 6gk5812-1ba00-2aa2 Firmware | ||
| Siemens 6gk5812-1ba00-2aa2 | ||
| Siemens 6gk5816-1aa00-2aa2 Firmware | ||
| Siemens 6gk5816-1aa00-2aa2 | ||
| Siemens 6gk5816-1ba00-2aa2 Firmware | ||
| Siemens 6gk5816-1ba00-2aa2 | ||
| Siemens 6gk5826-2ab00-2ab2 Firmware | ||
| Siemens 6gk5826-2ab00-2ab2 | ||
| Siemens 6gk5874-2aa00-2aa2 Firmware | ||
| Siemens 6gk5874-2aa00-2aa2 | ||
| Siemens 6gk5874-3aa00-2aa2 Firmware | ||
| Siemens 6gk5874-3aa00-2aa2 | ||
| Siemens 6gk5876-3aa02-2ba2 Firmware | ||
| Siemens 6gk5876-3aa02-2ba2 | ||
| Siemens 6gk5876-3aa02-2ea2 Firmware | ||
| Siemens 6gk5876-3aa02-2ea2 | ||
| Siemens 6gk5876-4aa00-2ba2 Firmware | ||
| Siemens 6gk5876-4aa00-2ba2 | ||
| Siemens 6gk5876-4aa00-2da2 Firmware | ||
| Siemens 6gk5876-4aa00-2da2 | ||
| Siemens 6gk5856-2ea00-3da1 Firmware | ||
| Siemens 6gk5856-2ea00-3da1 | ||
| Siemens 6gk5856-2ea00-3aa1 Firmware | ||
| Siemens 6gk5856-2ea00-3aa1 | ||
| Siemens 6gk5615-0aa00-2aa2 Firmware | ||
| Siemens 6gk5615-0aa00-2aa2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://www.strongswan.org/blog/2021/10/18/strongswan-vulnerability-(cve-2021-41990).html
- https://security-tracker.debian.org/tracker/CVE-2021-41990
- https://cert-portal.siemens.com/productcert/pdf/ssa-539476.pdf
- https://github.com/strongswan/strongswan/releases/tag/5.9.4
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5FJSATD2R2XHTG4P63GCMQ2N7EWKMME5/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQSQ3BEC22NF4NCDZVCT4P3Q2ZIAJXGJ/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Y3TQ32JLJOBJDB2EJKSX2PBPB5NFG2D4/
- https://www.debian.org/security/2021/dsa-4989
- https://www.strongswan.org/blog/2021/10/18/strongswan-vulnerability-%28cve-2021-41990%29.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5FJSATD2R2XHTG4P63GCMQ2N7EWKMME5/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WQSQ3BEC22NF4NCDZVCT4P3Q2ZIAJXGJ/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3TQ32JLJOBJDB2EJKSX2PBPB5NFG2D4/
Frequently Asked Questions
What is CVE-2021-41990?
CVE-2021-41990 is a vulnerability in the gmp plugin in strongSwan before version 5.9.4.
How does CVE-2021-41990 work?
CVE-2021-41990 is a remote integer overflow vulnerability that can be triggered by a crafted certificate with an RSASSA-PSS signature.
What is the severity of CVE-2021-41990?
CVE-2021-41990 has a severity rating of 7.5 (high).
Is remote code execution possible with CVE-2021-41990?
No, remote code execution cannot occur with CVE-2021-41990.
How can I fix CVE-2021-41990?
You can fix CVE-2021-41990 by updating to strongSwan version 5.9.4 or later.
- collector/security-tracker-debian
- collector/nvd-index
- agent/references
- agent/author
- agent/severity
- agent/type
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/softwarecombine
- agent/tags
- agent/weakness
- agent/description
- collector/mitre-cve
- source/MITRE
- package-manager/debian
- vendor/strongswan
- canonical/strongswan strongswan
- version/strongswan strongswan/5.6.1
- vendor/debian
- canonical/debian debian linux
- version/debian debian linux/10.0
- version/debian debian linux/11.0
- vendor/fedoraproject
- canonical/fedoraproject fedora
- version/fedoraproject fedora/33
- version/fedoraproject fedora/34
- version/fedoraproject fedora/35
- vendor/siemens
- canonical/siemens 6gk6108-4am00-2ba2 firmware
- canonical/siemens 6gk6108-4am00-2ba2
- canonical/siemens 6gk6108-4am00-2da2 firmware
- canonical/siemens 6gk6108-4am00-2da2
- canonical/siemens 6gk5804-0ap00-2aa2 firmware
- canonical/siemens 6gk5804-0ap00-2aa2
- canonical/siemens 6gk5812-1aa00-2aa2 firmware
- canonical/siemens 6gk5812-1aa00-2aa2
- canonical/siemens 6gk5812-1ba00-2aa2 firmware
- canonical/siemens 6gk5812-1ba00-2aa2
- canonical/siemens 6gk5816-1aa00-2aa2 firmware
- canonical/siemens 6gk5816-1aa00-2aa2
- canonical/siemens 6gk5816-1ba00-2aa2 firmware
- canonical/siemens 6gk5816-1ba00-2aa2
- canonical/siemens 6gk5826-2ab00-2ab2 firmware
- canonical/siemens 6gk5826-2ab00-2ab2
- canonical/siemens 6gk5874-2aa00-2aa2 firmware
- canonical/siemens 6gk5874-2aa00-2aa2
- canonical/siemens 6gk5874-3aa00-2aa2 firmware
- canonical/siemens 6gk5874-3aa00-2aa2
- canonical/siemens 6gk5876-3aa02-2ba2 firmware
- canonical/siemens 6gk5876-3aa02-2ba2
- canonical/siemens 6gk5876-3aa02-2ea2 firmware
- canonical/siemens 6gk5876-3aa02-2ea2
- canonical/siemens 6gk5876-4aa00-2ba2 firmware
- canonical/siemens 6gk5876-4aa00-2ba2
- canonical/siemens 6gk5876-4aa00-2da2 firmware
- canonical/siemens 6gk5876-4aa00-2da2
- canonical/siemens 6gk5856-2ea00-3da1 firmware
- canonical/siemens 6gk5856-2ea00-3da1
- canonical/siemens 6gk5856-2ea00-3aa1 firmware
- canonical/siemens 6gk5856-2ea00-3aa1
- canonical/siemens 6gk5615-0aa00-2aa2 firmware
- canonical/siemens 6gk5615-0aa00-2aa2