CVE-2017-9022
The gmp plugin in strongSwan before 5.5.3 does not properly validate RSA public keys before...
The gmp plugin in strongSwan before 5.5.3 does not properly validate RSA public keys before calling mpz_powm_sec, which allows remote peers to cause a denial of service (floating point exception and process crash) via a crafted certificate.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
CVE List
The gmp plugin in strongSwan before 5.5.3 does not properly validate RSA public keys before calling mpz_powm_sec, which allows remote peers to cause a denial of service (floating point exception and process crash) via a crafted certificate.
- Record
CVE-2017-9022- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-20
- Updated
- 2026-11-02
EUVDEUVD-2017-17962
The gmp plugin in strongSwan before 5.5.3 does not properly validate RSA public keys before calling mpz_powm_sec, which allows remote peers to cause a denial of service (floating point exception and process crash) via a crafted certificate.
- Record
EUVD-2017-17962- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-229r-rxf9-m7pj
The gmp plugin in strongSwan before 5.5.3 does not properly validate RSA public keys before...
The gmp plugin in strongSwan before 5.5.3 does not properly validate RSA public keys before calling mpz_powm_sec, which allows remote peers to cause a denial of service (floating point exception and process crash) via a crafted certificate.
- Record
GHSA-229r-rxf9-m7pj- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-20
- Updated
- 2026-11-02
NVD
The gmp plugin in strongSwan before 5.5.3 does not properly validate RSA public keys before calling mpz_powm_sec, which allows remote peers to cause a denial of service (floating point exception and process crash) via a crafted certificate.
- Record
CVE-2017-9022- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-20
- Updated
- 2026-11-02
OSVALPINE-CVE-2017-9022
The gmp plugin in strongSwan before 5.5.3 does not properly validate RSA public keys before calling mpz_powm_sec, which allows remote peers to cause a denial of service (floating point exception and process crash) via a crafted certificate.
- Record
ALPINE-CVE-2017-9022- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSV
The gmp plugin in strongSwan before 5.5.3 does not properly validate RSA public keys before calling mpz_powm_sec, which allows remote peers to cause a denial of service (floating point exception and process crash) via a crafted certificate.
- Record
CVE-2017-9022- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 6 moreShow less
OSVDEBIAN-CVE-2017-9022
The gmp plugin in strongSwan before 5.5.3 does not properly validate RSA public keys before calling mpz_powm_sec, which allows remote peers to cause a denial of service (floating point exception and process crash) via a crafted certificate.
- Record
DEBIAN-CVE-2017-9022- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2017-9022
The gmp plugin in strongSwan before 5.5.3 does not properly validate RSA public keys before calling mpz_powm_sec, which allows remote peers to cause a denial of service (floating point exception and process crash) via a crafted certificate.
- Record
UBUNTU-CVE-2017-9022- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11411-1 No score
strongswan-5.9.0-1.9 on GA media
These are all security issues fixed in the strongswan-5.9.0-1.9 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11411-1- Updated
- 2026-11-02
OSVSUSE-SU-2017:1471-1 No score
Security update for strongswan
This update for strongswan fixes the following issues:
- CVE-2017-9022: Insufficient Input Validation in gmp Plugin leads to Denial of service (bsc#1039514)
- CVE-2017-9023: Incorrect x509 ASN.1 parser error handling could lead to Denial of service (bsc#1039515)
- Record
SUSE-SU-2017:1471-1- Updated
- 2026-11-02
OSVSUSE-SU-2017:1473-1 No score
Security update for strongswan
This update for strongswan fixes the following issues:
- CVE-2017-9022: Insufficient Input Validation in gmp Plugin leads to Denial of service (bsc#1039514)
- CVE-2017-9023: Incorrect x509 ASN.1 parser error handling could lead to Denial of service (bsc#1039515)
- IKEv1 protocol is vulnerable to DoS amplification attack (bsc#985012)
- Record
SUSE-SU-2017:1473-1- Updated
- 2026-11-02
OSVUSN-3301-1 No score
strongswan vulnerabilities
It was discovered that the strongSwan gmp plugin incorrectly validated RSA public keys. A remote attacker could use this issue to cause strongSwan to crash, resulting in a denial of service. (CVE-2017-9022)
It was discovered that strongSwan incorrectly parsed ASN.1 CHOICE types. A remote attacker could use this issue to cause strongSwan to hang, resulting in a denial of service. (CVE-2017-9023)
- Record
USN-3301-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
strongswanAlpine:v3.10 |
before 5.5.3-r0 | 5.5.3-r0 |
strongswanAlpine:v3.11 |
before 5.5.3-r0 | 5.5.3-r0 |
strongswanAlpine:v3.12 |
before 5.5.3-r0 | 5.5.3-r0 |
strongswanAlpine:v3.13 |
before 5.5.3-r0 | 5.5.3-r0 |
strongswanAlpine:v3.14 |
before 5.5.3-r0 | 5.5.3-r0 |
strongswanAlpine:v3.15 |
before 5.5.3-r0 | 5.5.3-r0 |
strongswanAlpine:v3.16 |
before 5.5.3-r0 | 5.5.3-r0 |
strongswanAlpine:v3.17 |
before 5.5.3-r0 | 5.5.3-r0 |
strongswanAlpine:v3.18 |
before 5.5.3-r0 | 5.5.3-r0 |
strongswanAlpine:v3.19 |
before 5.5.3-r0 | 5.5.3-r0 |
Show 27 moreShow less
| Package | Affected | Fixed |
|---|---|---|
strongswanAlpine:v3.2 |
before 5.3.5-r2 | 5.3.5-r2 |
strongswanAlpine:v3.20 |
before 5.5.3-r0 | 5.5.3-r0 |
strongswanAlpine:v3.21 |
before 5.5.3-r0 | 5.5.3-r0 |
strongswanAlpine:v3.22 |
before 5.5.3-r0 | 5.5.3-r0 |
strongswanAlpine:v3.23 |
before 5.5.3-r0 | 5.5.3-r0 |
strongswanAlpine:v3.24 |
before 5.5.3-r0 | 5.5.3-r0 |
strongswanAlpine:v3.3 |
before 5.3.5-r2 | 5.3.5-r2 |
strongswanAlpine:v3.4 |
before 5.4.0-r2 | 5.4.0-r2 |
strongswanAlpine:v3.5 |
before 5.5.3-r0 | 5.5.3-r0 |
strongswanAlpine:v3.6 |
before 5.5.3-r0 | 5.5.3-r0 |
strongswanAlpine:v3.7 |
before 5.5.3-r0 | 5.5.3-r0 |
strongswanAlpine:v3.8 |
before 5.5.3-r0 | 5.5.3-r0 |
strongswanAlpine:v3.9 |
before 5.5.3-r0 | 5.5.3-r0 |
strongswanDebian:12 |
before 5.5.1-4 | 5.5.1-4 |
strongswanDebian:13 |
before 5.5.1-4 | 5.5.1-4 |
strongswanDebian:14 |
before 5.5.1-4 | 5.5.1-4 |
strongswanDebian:7 |
before 4.5.2-1.5+deb7u9, plus listed versions 4.5.2-1.5+deb7u14.5.2-1.5+deb7u24.5.2-1.5+deb7u2~bpo60+14.5.2-1.5+deb7u34.5.2-1.5+deb7u3~bpo60+1 Show 4 moreShow less4.5.2-1.5+deb7u44.5.2-1.5+deb7u64.5.2-1.5+deb7u74.5.2-1.5+deb7u8 |
4.5.2-1.5+deb7u9 |
strongswanDebian:8 |
before 5.2.1-6+deb8u3, plus listed versions 5.2.1-65.2.1-6+deb8u15.2.1-6+deb8u1~bpo70+15.2.1-6+deb8u25.2.1-6+deb8u2~bpo70+1 |
5.2.1-6+deb8u3 |
strongswanSUSE:Linux Enterprise Server 11 SP4 |
before 4.4.0-6.35.1 | 4.4.0-6.35.1 |
strongswanSUSE:Linux Enterprise Server for SAP Applications 11 SP4 |
before 4.4.0-6.35.1 | 4.4.0-6.35.1 |
strongswanSUSE:Linux Enterprise Desktop 12 SP2 |
before 5.1.3-25.1 | 5.1.3-25.1 |
strongswanSUSE:Linux Enterprise Server for Raspberry Pi 12 SP2 |
before 5.1.3-25.1 | 5.1.3-25.1 |
strongswanSUSE:Linux Enterprise Server 12 SP2 |
before 5.1.3-25.1 | 5.1.3-25.1 |
strongswanSUSE:Linux Enterprise Server for SAP Applications 12 SP2 |
before 5.1.3-25.1 | 5.1.3-25.1 |
strongswanUbuntu:14.04:LTS |
before 5.1.2-0ubuntu2.6, plus listed versions 4.6.4-95.1.0-25.1.0-35.1.1-0ubuntu15.1.1-0ubuntu2 Show 17 moreShow less5.1.1-0ubuntu35.1.1-0ubuntu45.1.1-0ubuntu55.1.1-0ubuntu75.1.1-0ubuntu145.1.1-0ubuntu175.1.2~dr3+git20130120-0ubuntu25.1.2~dr3+git20130120-0ubuntu35.1.2~rc1-0ubuntu35.1.2~rc1-0ubuntu45.1.2~rc2-0ubuntu25.1.2-0ubuntu15.1.2-0ubuntu25.1.2-0ubuntu2.25.1.2-0ubuntu2.35.1.2-0ubuntu2.45.1.2-0ubuntu2.5 |
5.1.2-0ubuntu2.6 |
strongswanUbuntu:16.04:LTS |
before 5.3.5-1ubuntu3.3, plus listed versions 5.1.2-0ubuntu65.1.2-0ubuntu75.1.2-0ubuntu85.3.5-1ubuntu15.3.5-1ubuntu25.3.5-1ubuntu35.3.5-1ubuntu3.15.3.5-1ubuntu3.2 |
5.3.5-1ubuntu3.3 |
strongswanopenSUSE:Tumbleweed |
before 5.9.0-1.9 | 5.9.0-1.9 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2017-9022 is a high vulnerability (CVSS 7.5) in Strongswan, published May 30, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.73%, the 77th percentile. Fixed in strongswan 5.5.3-r0.
References
strongswan.org/blog/2017/05/30/strongswan-vulnerability-%28cve-2017-9022%29.html
debian.org/security/2017/dsa-3866
securityfocus.com/bid/98760
ubuntu.com/usn/USN-3301-1
nvd.nist.gov/vuln/detail/CVE-2017-9022
Show 19 moreShow less
github.com/advisories/GHSA-229r-rxf9-m7pj
security.alpinelinux.org/vuln/CVE-2017-9022
security-tracker.debian.org/tracker/CVE-2017-9022
suse.com/support/update/announcement/2017/suse-su-20171471-1
bugzilla.suse.com/1039514
ubuntu.com/security/CVE-2017-9022
cve.org/CVERecord?id=CVE-2017-9022