CVE-2021-41991 Integer overflow in n/a
Remote attackers can trigger an integer overflow in strongSwan's certificate cache, potentially leading to remote code execution or denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2021-41991?
CVE-2021-41991 is a high-severity vulnerability in Debian Debian Linux, published on 18 Oct 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests with different certificates to fill the cache and later trigger the replacement of cache entries. The code attempts to select a less-often-used cache entry by means of a random number generator, but this is not done correctly. Remote code execution might be a slight possibility.
Weakness: CWE-190
Which versions are affected by CVE-2021-41991?
It affects 25 products.
Linux distribution packages (15)
strongswan SUSE:HPE Helion OpenStack 8 | All versions | 5.1.3-26.16.1 |
strongswan SUSE:Linux Enterprise Point of Sale 11 SP3 | All versions | 4.4.0-6.36.9.1 |
strongswan SUSE:Linux Enterprise Server 11 SP4-LTSS | All versions | 4.4.0-6.36.9.1 |
strongswan SUSE:Linux Enterprise Server 12 SP2-BCL | All versions | 5.1.3-26.16.1 |
strongswan SUSE:Linux Enterprise Server 12 SP3-BCL | All versions | 5.1.3-26.16.1 |
strongswan SUSE:Linux Enterprise Server 12 SP3-LTSS | All versions | 5.1.3-26.16.1 |
strongswan SUSE:Linux Enterprise Server 12 SP4-LTSS | All versions | 5.1.3-26.16.1 |
strongswan SUSE:Linux Enterprise Server 12 SP5 | All versions | 5.1.3-26.16.1 |
strongswan SUSE:Linux Enterprise Server for SAP Applications 12 SP3 | All versions | 5.1.3-26.16.1 |
strongswan SUSE:Linux Enterprise Server for SAP Applications 12 SP4 | All versions | 5.1.3-26.16.1 |
strongswan SUSE:Linux Enterprise Server for SAP Applications 12 SP5 | All versions | 5.1.3-26.16.1 |
strongswan SUSE:OpenStack Cloud 8 | All versions | 5.1.3-26.16.1 |
strongswan SUSE:OpenStack Cloud 9 | All versions | 5.1.3-26.16.1 |
strongswan SUSE:OpenStack Cloud Crowbar 8 | All versions | 5.1.3-26.16.1 |
strongswan SUSE:OpenStack Cloud Crowbar 9 | All versions | 5.1.3-26.16.1 |
Products include Debian Debian Linux, Fedoraproject Fedora, Siemens Cp 1543-1 Firmware, Siemens Scalance Sc622-2c Firmware, Siemens Scalance Sc632-2c Firmware, Siemens Scalance Sc636-2c Firmware and 19 more.
How do I fix CVE-2021-41991?
Upgrade to a fixed version.
Is CVE-2021-41991 being exploited?
There is no known exploitation of CVE-2021-41991 in the wild and no public exploit code.
Other vulnerabilities in Debian Debian Linux
Sources
Also known as ALPINE-CVE-2021-41991, AZL-6897, DEBIAN-CVE-2021-41991, DLA-2788-1, GHSA-jpr7-w98h-cvgm, SUSE-SU-2021:14827-1 and 3 more.