{"id":"CVE-2018-5388","aliases":["ALPINE-CVE-2018-5388","DEBIAN-CVE-2018-5388","DSA-4229-1","EUVD-2018-17158","GHSA-fg62-299p-x79j","SUSE-SU-2019:3056-1","SUSE-SU-2019:3266-1","UBUNTU-CVE-2018-5388","USN-3771-1","openSUSE-SU-2019:2594-1","openSUSE-SU-2019:2598-1","openSUSE-SU-2024:11411-1"],"status":"published","title":"In stroke_socket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer...","description":"In stroke_socket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer underflow, which may lead to resource exhaustion and denial of service while reading from the socket.","severity":{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.03917,"percentile":0.90382,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-124","CWE-787"],"published":"2018-05-31T00:00:00Z","modified":"2026-10-24T10:30:54Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"strongswan","fixed_in":["5.6.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"strongswan","fixed_in":["5.6.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"strongswan","fixed_in":["5.6.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"strongswan","fixed_in":["5.6.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"strongswan","fixed_in":["5.6.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"strongswan","fixed_in":["5.6.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"strongswan","fixed_in":["5.6.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"strongswan","fixed_in":["5.6.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"strongswan","fixed_in":["5.6.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"strongswan","fixed_in":["5.6.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"strongswan","fixed_in":["5.6.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"strongswan","fixed_in":["5.6.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"strongswan","fixed_in":["5.6.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"strongswan","fixed_in":["5.6.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"strongswan","fixed_in":["5.6.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.7","package":"strongswan","fixed_in":["5.6.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"strongswan","fixed_in":["5.6.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"strongswan","fixed_in":["5.6.3-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"strongswan","fixed_in":["5.6.3-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"strongswan","fixed_in":["5.6.3-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"strongswan","fixed_in":["5.6.3-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"strongswan","fixed_in":["5.1.2-0ubuntu2.10"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"strongswan","fixed_in":["5.3.5-1ubuntu3.7"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"strongswan","fixed_in":["5.6.2-1ubuntu2.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.7","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.3-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.3-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.3-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.3-1"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.1-6+deb8u6"}]}],"versions":["5.2.1-6","5.2.1-6+deb8u1","5.2.1-6+deb8u1~bpo70+1","5.2.1-6+deb8u2","5.2.1-6+deb8u2~bpo70+1","5.2.1-6+deb8u3","5.2.1-6+deb8u4","5.2.1-6+deb8u5"],"bundled":2},{"source":"osv","ecosystem":"Debian:9","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.1-4+deb9u2"}]}],"versions":["5.5.1-4","5.5.1-4+deb9u1"],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.0-4.3.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.0-4.3.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.0-4.3.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.3-26.13.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.3-26.13.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.3-26.13.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.3-26.13.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.3-26.13.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.3-26.13.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.3-26.13.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.3-26.13.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.3-26.13.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.3-26.13.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.3-26.13.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.3-26.13.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.3-26.13.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.3-26.13.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.3-26.13.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 5","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.3-26.13.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.2-0ubuntu2.10"}]}],"versions":["4.6.4-9","5.1.0-2","5.1.0-3","5.1.1-0ubuntu1","5.1.1-0ubuntu2","5.1.1-0ubuntu3","5.1.1-0ubuntu4","5.1.1-0ubuntu5","5.1.1-0ubuntu7","5.1.1-0ubuntu14","5.1.1-0ubuntu17","5.1.2~dr3+git20130120-0ubuntu2","5.1.2~dr3+git20130120-0ubuntu3","5.1.2~rc1-0ubuntu3","5.1.2~rc1-0ubuntu4","5.1.2~rc2-0ubuntu2","5.1.2-0ubuntu1","5.1.2-0ubuntu2","5.1.2-0ubuntu2.2","5.1.2-0ubuntu2.3","5.1.2-0ubuntu2.4","5.1.2-0ubuntu2.5","5.1.2-0ubuntu2.6","5.1.2-0ubuntu2.7","5.1.2-0ubuntu2.8"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.5-1ubuntu3.7"}]}],"versions":["5.1.2-0ubuntu6","5.1.2-0ubuntu7","5.1.2-0ubuntu8","5.3.5-1ubuntu1","5.3.5-1ubuntu2","5.3.5-1ubuntu3","5.3.5-1ubuntu3.1","5.3.5-1ubuntu3.2","5.3.5-1ubuntu3.3","5.3.5-1ubuntu3.4","5.3.5-1ubuntu3.5"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.2-1ubuntu2.2"}]}],"versions":["5.5.1-4ubuntu2","5.5.1-4ubuntu3","5.6.1-2ubuntu1","5.6.1-2ubuntu2","5.6.1-2ubuntu3","5.6.1-2ubuntu4","5.6.2-1ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.2-0ubuntu2.10"}]}],"versions":["4.6.4-9","5.1.0-2","5.1.0-3","5.1.1-0ubuntu1","5.1.1-0ubuntu2","5.1.1-0ubuntu3","5.1.1-0ubuntu4","5.1.1-0ubuntu5","5.1.1-0ubuntu7","5.1.1-0ubuntu14","5.1.1-0ubuntu17","5.1.2~dr3+git20130120-0ubuntu2","5.1.2~dr3+git20130120-0ubuntu3","5.1.2~rc1-0ubuntu3","5.1.2~rc1-0ubuntu4","5.1.2~rc2-0ubuntu2","5.1.2-0ubuntu1","5.1.2-0ubuntu2","5.1.2-0ubuntu2.2","5.1.2-0ubuntu2.3","5.1.2-0ubuntu2.4","5.1.2-0ubuntu2.5","5.1.2-0ubuntu2.6","5.1.2-0ubuntu2.7","5.1.2-0ubuntu2.8"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.5-1ubuntu3.7"}]}],"versions":["5.1.2-0ubuntu6","5.1.2-0ubuntu7","5.1.2-0ubuntu8","5.3.5-1ubuntu1","5.3.5-1ubuntu2","5.3.5-1ubuntu3","5.3.5-1ubuntu3.1","5.3.5-1ubuntu3.2","5.3.5-1ubuntu3.3","5.3.5-1ubuntu3.4","5.3.5-1ubuntu3.5"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.2-1ubuntu2.2"}]}],"versions":["5.5.1-4ubuntu2","5.5.1-4ubuntu3","5.6.1-2ubuntu1","5.6.1-2ubuntu2","5.6.1-2ubuntu3","5.6.1-2ubuntu4","5.6.2-1ubuntu2"],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.0-lp150.3.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.0-lp151.4.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.0-1.9"}]}],"bundled":7}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"strongswan","product":"strongswan"}],"references":[{"url":"http://www.kb.cert.org/vuls/id/338343","tags":["third-party-advisory","x_transferred","Third Party Advisory","US Government Resource","advisory"]},{"url":"https://security.gentoo.org/glsa/201811-16","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://git.strongswan.org/?p=strongswan.git%3Ba=commitdiff%3Bh=0acd1ab4","tags":["x_transferred","web"]},{"url":"http://www.securityfocus.com/bid/104263","tags":["vdb-entry","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://usn.ubuntu.com/3771-1/","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.debian.org/security/2018/dsa-4229","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00077.html","tags":["vendor-advisory","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00001.html","tags":["vendor-advisory","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00047.html","tags":["vendor-advisory","x_transferred","web"]},{"url":"http://packetstormsecurity.com/files/172833/strongSwan-VPN-Charon-Server-Buffer-Overflow.html","tags":["x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5388"},{"url":"https://git.strongswan.org/?p=strongswan.git;a=commitdiff;h=0acd1ab4"},{"url":"https://github.com/advisories/GHSA-fg62-299p-x79j"},{"url":"https://security.alpinelinux.org/vuln/CVE-2018-5388","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-5388","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20193056-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1093536","tags":["report"]},{"url":"https://bugzilla.suse.com/1094462","tags":["report"]},{"url":"https://bugzilla.suse.com/1107874","tags":["report"]},{"url":"https://bugzilla.suse.com/1109845","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10811","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16151","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16152","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-17540","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5388","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20193266-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1009254","tags":["report"]},{"url":"https://bugzilla.suse.com/1071853","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-5388","tags":["report"]},{"url":"https://www.kb.cert.org/vuls/id/338343","tags":["report"]},{"url":"https://www.strongswan.org/blog/2018/05/28/strongswan-vulnerability-(cve-2018-5388).html","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3771-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-5388","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10811","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-16151","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-16152","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/V72HVR7HTXMHBWIRVKULTGTBNB7GX2V3/#V72HVR7HTXMHBWIRVKULTGTBNB7GX2V3","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/V6PYSTPUD6KHGTVSWSXGQVRQQ6SLUQ6H/#V6PYSTPUD6KHGTVSWSXGQVRQQ6SLUQ6H","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11185","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9022","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9023","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-6459","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2018-5388","description":"In stroke_socket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer underflow, which may lead to resource exhaustion and denial of service while reading from the socket.","status":"published","published":"2018-05-31T00:00:00Z","modified":"2024-08-05T05:33:44.315Z","cwes":["CWE-124"],"updated_at":"2026-11-02T14:35:01.28843Z"}],"euvd":[{"id":"EUVD-2018-17158","description":"In stroke_socket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer underflow, which may lead to resource exhaustion and denial of service while reading from the socket.","status":"published","published":"2018-05-31T00:00:00Z","modified":"2024-08-05T05:33:44Z","updated_at":"2026-11-03T02:40:10.651692Z"}],"ghsa":[{"id":"GHSA-fg62-299p-x79j","title":"In stroke_socket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer...","description":"In stroke_socket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer underflow, which may lead to resource exhaustion and denial of service while reading from the socket.","status":"published","published":"2022-05-13T01:32:12Z","modified":"2023-06-12T09:30:18Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-124","CWE-787"],"updated_at":"2026-11-02T14:54:38.89081Z"}],"nvd":[{"id":"CVE-2018-5388","description":"In stroke_socket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer underflow, which may lead to resource exhaustion and denial of service while reading from the socket.","status":"published","published":"2018-05-31T13:29:00.22Z","modified":"2026-06-17T02:00:14.457Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-124","CWE-787"],"updated_at":"2026-11-02T14:04:28.483469Z"}],"osv":[{"id":"ALPINE-CVE-2018-5388","description":"In stroke_socket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer underflow, which may lead to resource exhaustion and denial of service while reading from the socket.","status":"published","published":"2018-05-31T13:29:00.22Z","modified":"2026-10-23T17:17:55.273178722Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:27:47.663013Z"},{"id":"CVE-2018-5388","description":"In stroke_socket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer underflow, which may lead to resource exhaustion and denial of service while reading from the socket.","status":"published","published":"2018-05-31T13:29:00.22Z","modified":"2026-10-24T10:30:54.707170869Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:09.442568Z"},{"id":"DEBIAN-CVE-2018-5388","description":"In stroke_socket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer underflow, which may lead to resource exhaustion and denial of service while reading from the socket.","status":"published","published":"2018-05-31T13:29:00.22Z","modified":"2026-10-23T18:03:22.141888211Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:30.867575Z"},{"id":"UBUNTU-CVE-2018-5388","description":"In stroke_socket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer underflow, which may lead to resource exhaustion and denial of service while reading from the socket.","status":"published","published":"2018-05-31T00:00:00Z","modified":"2026-02-04T02:55:15.669935Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:18.33562Z"},{"id":"DSA-4229-1","title":"strongswan - security update","status":"published","published":"2018-06-14T00:00:00Z","modified":"2026-03-09T01:18:35.882916Z","updated_at":"2026-11-02T15:46:16.862196Z"},{"id":"openSUSE-SU-2019:2594-1","title":"Security update for strongswan","description":"This update for strongswan fixes the following issues:\n\nSecurity issues fixed: \n\n- CVE-2018-5388: Fixed a buffer underflow which may allow to a remote attacker \n  with local user credentials to resource exhaustion and denial of service while \n  reading from the socket (bsc#1094462).\n- CVE-2018-10811: Fixed a denial of service during  the IKEv2 key derivation if \n  the openssl plugin is used in FIPS mode and HMAC-MD5 is negotiated as PRF \n  (bsc#1093536).\n- CVE-2018-16151,CVE-2018-16152: Fixed multiple flaws in the gmp plugin which \n  might lead to authorization bypass (bsc#1107874).\n- CVE-2018-17540: Fixed an improper input validation in gmp plugin (bsc#1109845).  \n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-11-30T19:16:42Z","modified":"2026-02-04T03:16:32.79385Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"openSUSE-SU-2019:2598-1","title":"Security update for strongswan","description":"This update for strongswan fixes the following issues:\n\nSecurity issues fixed: \n\n- CVE-2018-5388: Fixed a buffer underflow which may allow to a remote attacker \n  with local user credentials to resource exhaustion and denial of service while \n  reading from the socket (bsc#1094462).\n- CVE-2018-10811: Fixed a denial of service during  the IKEv2 key derivation if \n  the openssl plugin is used in FIPS mode and HMAC-MD5 is negotiated as PRF \n  (bsc#1093536).\n- CVE-2018-16151,CVE-2018-16152: Fixed multiple flaws in the gmp plugin which \n  might lead to authorization bypass (bsc#1107874).\n- CVE-2018-17540: Fixed an improper input validation in gmp plugin (bsc#1109845).  \n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-11-30T23:16:02Z","modified":"2026-02-04T04:29:27.253236Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"openSUSE-SU-2024:11411-1","title":"strongswan-5.9.0-1.9 on GA media","description":"These are all security issues fixed in the strongswan-5.9.0-1.9 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:15:46.533867Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"SUSE-SU-2019:3056-1","title":"Security update for strongswan","description":"This update for strongswan fixes the following issues:\n\nSecurity issues fixed: \n\n- CVE-2018-5388: Fixed a buffer underflow which may allow to a remote attacker \n  with local user credentials to resource exhaustion and denial of service while \n  reading from the socket (bsc#1094462).\n- CVE-2018-10811: Fixed a denial of service during  the IKEv2 key derivation if \n  the openssl plugin is used in FIPS mode and HMAC-MD5 is negotiated as PRF \n  (bsc#1093536).\n- CVE-2018-16151,CVE-2018-16152: Fixed multiple flaws in the gmp plugin which \n  might lead to authorization bypass (bsc#1107874).\n- CVE-2018-17540: Fixed an improper input validation in gmp plugin (bsc#1109845).  \n","status":"published","published":"2019-11-25T16:30:01Z","modified":"2026-02-04T03:26:52.971684Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2019:3266-1","title":"Security update for strongswan","description":"This update for strongswan provides the following fixes:\n\t  \nSecurity issues fixed: \n\n- CVE-2018-5388: Fixed a buffer underflow which may allow to a remote attacker \n  with local user credentials to resource exhaustion and denial of service while \n  reading from the socket (bsc#1094462).\n- CVE-2018-10811: Fixed a denial of service during  the IKEv2 key derivation if \n  the openssl plugin is used in FIPS mode and HMAC-MD5 is negotiated as PRF \n  (bsc#1093536).\n- CVE-2018-16151,CVE-2018-16152: Fixed multiple flaws in the gmp plugin which \n  might lead to authorization bypass (bsc#1107874).\n- CVE-2018-17540: Fixed an improper input validation in gmp plugin (bsc#1109845).  \n\nOther issues addressed:\n\n- Fixed some client fails when the scep server URL is used with HTTPS protocol (bsc#1071853).\n- Reject Diffie-Hellman key exchanges using primes smaller than 1024 bit.\n- Handle unexpected informational message from SonicWall. (bsc#1009254)\n","status":"published","published":"2019-12-11T10:19:12Z","modified":"2026-02-04T02:53:30.611094Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"USN-3771-1","title":"strongswan vulnerabilities","description":"It was discovered that strongSwan incorrectly handled IKEv2 key derivation.\nA remote attacker could possibly use this issue to cause strongSwan to\ncrash, resulting in a denial of service. (CVE-2018-10811)\n\nSze Yiu Chau discovered that strongSwan incorrectly handled parsing OIDs in\nthe gmp plugin. A remote attacker could possibly use this issue to bypass\nauthorization. (CVE-2018-16151)\n\nSze Yiu Chau discovered that strongSwan incorrectly handled certain\nparameters fields in the gmp plugin. A remote attacker could possibly use\nthis issue to bypass authorization. (CVE-2018-16152)\n\nIt was discovered that strongSwan incorrectly handled the stroke plugin. A\nlocal administrator could use this issue to cause a denial of service, or\npossibly execute arbitrary code. (CVE-2018-5388)\n","status":"published","published":"2018-09-25T12:34:59Z","modified":"2026-02-10T04:41:25Z","updated_at":"2026-11-02T16:58:14.019824Z"}]}}