{"id":"CVE-2022-40617","aliases":["ALPINE-CVE-2022-40617","AZL-11398","DEBIAN-CVE-2022-40617","DLA-3143-1","DSA-5249-1","EUVD-2022-43891","GHSA-f2x8-4jwf-gqrg","OESA-2022-2034","SUSE-SU-2022:4159-1","SUSE-SU-2022:4185-1","SUSE-SU-2022:4197-1","UBUNTU-CVE-2022-40617","USN-5651-1","USN-5651-2"],"status":"published","title":"strongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation...","description":"strongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation plugin by sending a crafted end-entity (and intermediate CA) certificate that contains a CRL/OCSP URL that points to a server (under the attacker's control) that doesn't properly respond but (for example) just does nothing after the initial TCP handshake, or sends an excessive amount of application data.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.01994,"percentile":0.80986,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-400"],"published":"2022-10-03T00:00:00Z","modified":"2026-10-28T02:31:13Z","fixes":[{"ecosystem":"Alpine:v3.13","package":"strongswan","fixed_in":["5.9.1-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"strongswan","fixed_in":["5.9.1-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"strongswan","fixed_in":["5.9.1-r4"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"strongswan","fixed_in":["5.9.5-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"strongswan","fixed_in":["5.9.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"strongswan","fixed_in":["5.9.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"strongswan","fixed_in":["5.9.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"strongswan","fixed_in":["5.9.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"strongswan","fixed_in":["5.9.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"strongswan","fixed_in":["5.9.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"strongswan","fixed_in":["5.9.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"strongswan","fixed_in":["5.9.8-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"strongswan","fixed_in":["5.9.8-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"strongswan","fixed_in":["5.9.8-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"strongswan","fixed_in":["5.9.8-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"strongswan","fixed_in":["5.9.8-1"],"sources":["osv"]},{"ecosystem":"Debian:10","package":"strongswan","fixed_in":["5.7.2-1+deb10u3"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"strongswan","fixed_in":["5.9.1-1+deb11u3"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"strongswan","fixed_in":["5.7.2-9.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"strongswan","fixed_in":["5.7.2-10.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"strongswan","fixed_in":["5.7.2-12.oe2203"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"strongswan","fixed_in":["5.8.2-150200.11.30.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP3","package":"strongswan","fixed_in":["5.8.2-150200.11.30.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP3","package":"strongswan","fixed_in":["5.8.2-150200.11.30.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"strongswan","fixed_in":["5.8.2-150200.11.30.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"strongswan","fixed_in":["5.1.3-26.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"strongswan","fixed_in":["5.1.3-26.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"strongswan","fixed_in":["5.8.2-150400.19.3.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP4","package":"strongswan","fixed_in":["5.8.2-150400.19.3.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP4","package":"strongswan","fixed_in":["5.8.2-150400.19.3.3"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"strongswan","fixed_in":["5.8.2-150400.19.3.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"strongswan","fixed_in":["5.1.2-0ubuntu2.11+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"strongswan","fixed_in":["5.3.5-1ubuntu3.8+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:FIPS-updates:16.04:LTS","package":"strongswan","fixed_in":["5.3.5-1ubuntu3.fips.3.8.6"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"strongswan","fixed_in":["5.6.2-1ubuntu2.9"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:FIPS-updates:18.04:LTS","package":"strongswan","fixed_in":["5.6.2-1ubuntu2.fips.2.9"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"strongswan","fixed_in":["5.8.2-1ubuntu3.5"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:FIPS-updates:20.04:LTS","package":"strongswan","fixed_in":["5.8.2-1ubuntu3.fips.3.5"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"strongswan","fixed_in":["5.9.5-2ubuntu2.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.13","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.1-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.1-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.1-r4"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.5-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.8-r0"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.8-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.8-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.8-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.8-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7.2-1+deb10u3"}]}],"versions":["5.7.2-1","5.7.2-1+deb10u1","5.7.2-1+deb10u2"]},{"source":"osv","ecosystem":"Debian:11","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.1-1+deb11u3"}]}],"versions":["5.9.1-1","5.9.1-1+deb11u1","5.9.1-1+deb11u2"]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7.2-9.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7.2-10.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7.2-12.oe2203"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-150200.11.30.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP3","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-150200.11.30.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP3","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-150200.11.30.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-150200.11.30.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.3-26.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.3-26.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-150400.19.3.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP4","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-150400.19.3.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP4","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-150400.19.3.3"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-150400.19.3.3"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.2-0ubuntu2.11+esm3"}]}],"versions":["4.6.4-9","5.1.0-2","5.1.0-3","5.1.1-0ubuntu1","5.1.1-0ubuntu2","5.1.1-0ubuntu3","5.1.1-0ubuntu4","5.1.1-0ubuntu5","5.1.1-0ubuntu7","5.1.1-0ubuntu14","5.1.1-0ubuntu17","5.1.2~dr3+git20130120-0ubuntu2","5.1.2~dr3+git20130120-0ubuntu3","5.1.2~rc1-0ubuntu3","5.1.2~rc1-0ubuntu4","5.1.2~rc2-0ubuntu2","5.1.2-0ubuntu1","5.1.2-0ubuntu2","5.1.2-0ubuntu2.2","5.1.2-0ubuntu2.3","5.1.2-0ubuntu2.4","5.1.2-0ubuntu2.5","5.1.2-0ubuntu2.6","5.1.2-0ubuntu2.7","5.1.2-0ubuntu2.8","5.1.2-0ubuntu2.10","5.1.2-0ubuntu2.11","5.1.2-0ubuntu2.11+esm1","5.1.2-0ubuntu2.11+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.5-1ubuntu3.8+esm3"}]}],"versions":["5.1.2-0ubuntu6","5.1.2-0ubuntu7","5.1.2-0ubuntu8","5.3.5-1ubuntu1","5.3.5-1ubuntu2","5.3.5-1ubuntu3","5.3.5-1ubuntu3.1","5.3.5-1ubuntu3.2","5.3.5-1ubuntu3.3","5.3.5-1ubuntu3.4","5.3.5-1ubuntu3.5","5.3.5-1ubuntu3.7","5.3.5-1ubuntu3.8","5.3.5-1ubuntu3.8+esm1","5.3.5-1ubuntu3.8+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:16.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.5-1ubuntu3.fips.3.8.6"}]}],"versions":["5.3.5-1ubuntu3.fips.3.4.1","5.3.5-1ubuntu3.fips.3.4.2","5.3.5-1ubuntu3.fips.3.8.1","5.3.5-1ubuntu3.fips.3.8.2","5.3.5-1ubuntu3.fips.3.8.3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS:16.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.5-1ubuntu3.fips.3.1","5.3.5-1ubuntu3.fips.3.2","5.3.5-1ubuntu3.fips.3.3"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.2-1ubuntu2.9"}]}],"versions":["5.5.1-4ubuntu2","5.5.1-4ubuntu3","5.6.1-2ubuntu1","5.6.1-2ubuntu2","5.6.1-2ubuntu3","5.6.1-2ubuntu4","5.6.2-1ubuntu2","5.6.2-1ubuntu2.2","5.6.2-1ubuntu2.3","5.6.2-1ubuntu2.4","5.6.2-1ubuntu2.5","5.6.2-1ubuntu2.6","5.6.2-1ubuntu2.7","5.6.2-1ubuntu2.8"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:18.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.2-1ubuntu2.fips.2.9"}]}],"versions":["5.6.2-1ubuntu2.fips.2.5.1","5.6.2-1ubuntu2.fips.2.7.1","5.6.2-1ubuntu2.fips.2.7.2","5.6.2-1ubuntu2.fips.2.8.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS:18.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.6.2-1ubuntu2.fips.2.4.2","5.6.2-1ubuntu2.fips.2.5.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-1ubuntu3.5"}]}],"versions":["5.7.2-1ubuntu3","5.8.1-1ubuntu1","5.8.2-1ubuntu1","5.8.2-1ubuntu2","5.8.2-1ubuntu3","5.8.2-1ubuntu3.1","5.8.2-1ubuntu3.2","5.8.2-1ubuntu3.3","5.8.2-1ubuntu3.4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:20.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-1ubuntu3.fips.3.5"}]}],"versions":["5.8.2-1ubuntu3.fips.3.1.2","5.8.2-1ubuntu3.fips.3.3.1","5.8.2-1ubuntu3.fips.3.4.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS:20.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.2-1ubuntu3.fips.3.1.2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.5-2ubuntu2.1"}]}],"versions":["5.9.1-1ubuntu3","5.9.1-1ubuntu3.1","5.9.4-1ubuntu1","5.9.4-1ubuntu2","5.9.4-1ubuntu3","5.9.4-1ubuntu4","5.9.5-2ubuntu1","5.9.5-2ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.2-1ubuntu2.9"}]}],"versions":["5.5.1-4ubuntu2","5.5.1-4ubuntu3","5.6.1-2ubuntu1","5.6.1-2ubuntu2","5.6.1-2ubuntu3","5.6.1-2ubuntu4","5.6.2-1ubuntu2","5.6.2-1ubuntu2.2","5.6.2-1ubuntu2.3","5.6.2-1ubuntu2.4","5.6.2-1ubuntu2.5","5.6.2-1ubuntu2.6","5.6.2-1ubuntu2.7","5.6.2-1ubuntu2.8"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-1ubuntu3.5"}]}],"versions":["5.7.2-1ubuntu3","5.8.1-1ubuntu1","5.8.2-1ubuntu1","5.8.2-1ubuntu2","5.8.2-1ubuntu3","5.8.2-1ubuntu3.1","5.8.2-1ubuntu3.2","5.8.2-1ubuntu3.3","5.8.2-1ubuntu3.4"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.5-2ubuntu2.1"}]}],"versions":["5.9.1-1ubuntu3","5.9.1-1ubuntu3.1","5.9.4-1ubuntu1","5.9.4-1ubuntu2","5.9.4-1ubuntu3","5.9.4-1ubuntu4","5.9.5-2ubuntu1","5.9.5-2ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.2-0ubuntu2.11+esm3"}]}],"versions":["4.6.4-9","5.1.0-2","5.1.0-3","5.1.1-0ubuntu1","5.1.1-0ubuntu2","5.1.1-0ubuntu3","5.1.1-0ubuntu4","5.1.1-0ubuntu5","5.1.1-0ubuntu7","5.1.1-0ubuntu14","5.1.1-0ubuntu17","5.1.2~dr3+git20130120-0ubuntu2","5.1.2~dr3+git20130120-0ubuntu3","5.1.2~rc1-0ubuntu3","5.1.2~rc1-0ubuntu4","5.1.2~rc2-0ubuntu2","5.1.2-0ubuntu1","5.1.2-0ubuntu2","5.1.2-0ubuntu2.2","5.1.2-0ubuntu2.3","5.1.2-0ubuntu2.4","5.1.2-0ubuntu2.5","5.1.2-0ubuntu2.6","5.1.2-0ubuntu2.7","5.1.2-0ubuntu2.8","5.1.2-0ubuntu2.10","5.1.2-0ubuntu2.11","5.1.2-0ubuntu2.11+esm1","5.1.2-0ubuntu2.11+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.5-1ubuntu3.8+esm3"}]}],"versions":["5.1.2-0ubuntu6","5.1.2-0ubuntu7","5.1.2-0ubuntu8","5.3.5-1ubuntu1","5.3.5-1ubuntu2","5.3.5-1ubuntu3","5.3.5-1ubuntu3.1","5.3.5-1ubuntu3.2","5.3.5-1ubuntu3.3","5.3.5-1ubuntu3.4","5.3.5-1ubuntu3.5","5.3.5-1ubuntu3.7","5.3.5-1ubuntu3.8","5.3.5-1ubuntu3.8+esm1","5.3.5-1ubuntu3.8+esm2"]}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"stormshield","product":"stormshield_network_security"},{"vendor":"strongswan","product":"strongswan"}],"references":[{"url":"https://www.strongswan.org/blog/2022/10/03/strongswan-vulnerability-%28cve-2022-40617%29.html","tags":["x_transferred","article"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J3GAYIOCSLU57C45CO4UE4IV4JZE4W3L/","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-40617","tags":["web","advisory"]},{"url":"https://www.strongswan.org/blog/2022/10/03/strongswan-vulnerability-(cve-2022-40617).html"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J3GAYIOCSLU57C45CO4UE4IV4JZE4W3L"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/J3GAYIOCSLU57C45CO4UE4IV4JZE4W3L"},{"url":"https://github.com/advisories/GHSA-f2x8-4jwf-gqrg"},{"url":"https://security.alpinelinux.org/vuln/CVE-2022-40617","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/40xxx/CVE-2022-40617.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-40617","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-2034","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20224159-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1203556","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-40617","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20224185-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20224197-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-40617","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5651-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5651-2","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-40617","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2022-40617","description":"strongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation plugin by sending a crafted end-entity (and intermediate CA) certificate that contains a CRL/OCSP URL that points to a server (under the attacker's control) that doesn't properly respond but (for example) just does nothing after the initial TCP handshake, or sends an excessive amount of application data.","status":"published","published":"2022-10-31T00:00:00Z","modified":"2025-05-06T18:29:51.839Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:34:30.493103Z"}],"euvd":[{"id":"EUVD-2022-43891","description":"strongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation plugin by sending a crafted end-entity (and intermediate CA) certificate that contains a CRL/OCSP URL that points to a server (under the attacker's control) that doesn't properly respond but (for example) just does nothing after the initial TCP handshake, or sends an excessive amount of application data.","status":"published","published":"2022-10-31T00:00:00Z","modified":"2025-05-06T18:29:51Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T20:32:53.861279Z"}],"ghsa":[{"id":"GHSA-f2x8-4jwf-gqrg","title":"strongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation...","description":"strongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation plugin by sending a crafted end-entity (and intermediate CA) certificate that contains a CRL/OCSP URL that points to a server (under the attacker's control) that doesn't properly respond but (for example) just does nothing after the initial TCP handshake, or sends an excessive amount of application data.","status":"published","published":"2022-10-31T12:00:19Z","modified":"2025-05-06T21:31:40Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T15:02:09.61634Z"}],"nvd":[{"id":"CVE-2022-40617","description":"strongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation plugin by sending a crafted end-entity (and intermediate CA) certificate that contains a CRL/OCSP URL that points to a server (under the attacker's control) that doesn't properly respond but (for example) just does nothing after the initial TCP handshake, or sends an excessive amount of application data.","status":"published","published":"2022-10-31T06:15:09.887Z","modified":"2026-06-17T05:01:43.003Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:07:31.127985Z"}],"osv":[{"id":"ALPINE-CVE-2022-40617","description":"strongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation plugin by sending a crafted end-entity (and intermediate CA) certificate that contains a CRL/OCSP URL that points to a server (under the attacker's control) that doesn't properly respond but (for example) just does nothing after the initial TCP handshake, or sends an excessive amount of application data.","status":"published","published":"2022-10-31T06:15:09.887Z","modified":"2026-11-03T07:18:33.691969705Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T07:50:38.973973Z"},{"id":"AZL-11398","title":"CVE-2022-40617 affecting package strongswan for versions less than 5.9.8-1","description":"strongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation plugin by sending a crafted end-entity (and intermediate CA) certificate that contains a CRL/OCSP URL that points to a server (under the attacker's control) that doesn't properly respond but (for example) just does nothing after the initial TCP handshake, or sends an excessive amount of application data.","status":"published","published":"2022-10-31T06:15:09Z","modified":"2026-04-21T04:22:06.18719Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:02.666535Z"},{"id":"CVE-2022-40617","description":"strongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation plugin by sending a crafted end-entity (and intermediate CA) certificate that contains a CRL/OCSP URL that points to a server (under the attacker's control) that doesn't properly respond but (for example) just does nothing after the initial TCP handshake, or sends an excessive amount of application data.","status":"published","published":"2022-10-31T00:00:00Z","modified":"2026-10-28T02:31:13.437772811Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:26.860704Z"},{"id":"DEBIAN-CVE-2022-40617","description":"strongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation plugin by sending a crafted end-entity (and intermediate CA) certificate that contains a CRL/OCSP URL that points to a server (under the attacker's control) that doesn't properly respond but (for example) just does nothing after the initial TCP handshake, or sends an excessive amount of application data.","status":"published","published":"2022-10-31T06:15:09.887Z","modified":"2026-11-03T08:04:09.843580321Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T08:23:07.763774Z"},{"id":"OESA-2022-2034","title":"strongswan security update","description":"The strongSwan IPsec implementation supports both the IKEv1 and IKEv2 key exchange protocols in conjunction with the native NETKEY IPsec stack of the Linux kernel.\r\n\r\nSecurity Fix(es):\r\n\r\nstrongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation plugin by sending a crafted end-entity (and intermediate CA) certificate that contains a CRL/OCSP URL that points to a server (under the attacker\u0026apos;s control) that doesn\u0026apos;t properly respond but (for example) just does nothing after the initial TCP handshake, or sends an excessive amount of application data.(CVE-2022-40617)","status":"published","published":"2022-11-03T11:05:21Z","modified":"2026-08-18T01:17:21.353229308Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"UBUNTU-CVE-2022-40617","description":"strongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation plugin by sending a crafted end-entity (and intermediate CA) certificate that contains a CRL/OCSP URL that points to a server (under the attacker's control) that doesn't properly respond but (for example) just does nothing after the initial TCP handshake, or sends an excessive amount of application data.","status":"published","published":"2022-10-03T00:00:00Z","modified":"2026-10-05T19:20:15.878052966Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:53:55.502114Z"},{"id":"DLA-3143-1","title":"strongswan - security update","status":"published","published":"2022-10-10T00:00:00Z","modified":"2026-03-09T01:19:53.067144Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"DSA-5249-1","title":"strongswan - security update","status":"published","published":"2022-10-06T00:00:00Z","modified":"2026-03-09T02:11:17.300741Z","updated_at":"2026-11-02T15:46:17.543497Z"},{"id":"SUSE-SU-2022:4159-1","title":"Security update for strongswan","description":"This update for strongswan fixes the following issues:\n\n- CVE-2022-40617: Fixed that using untrusted URIs for revocation checking could lead to denial of service (bsc#1203556)\n","status":"published","published":"2022-11-22T09:09:40Z","modified":"2025-05-02T04:33:34.194044Z","updated_at":"2026-11-02T15:53:51.440565Z"},{"id":"SUSE-SU-2022:4185-1","title":"Security update for strongswan","description":"This update for strongswan fixes the following issues:\n\n- CVE-2022-40617: Fixed that using untrusted URIs for revocation checking could lead to denial of service (bsc#1203556)\n","status":"published","published":"2022-11-22T14:32:41Z","modified":"2026-02-04T03:58:01.350313Z","updated_at":"2026-11-02T15:53:51.440565Z"},{"id":"SUSE-SU-2022:4197-1","title":"Security update for strongswan","description":"This update for strongswan fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2022-40617: Fixed that using untrusted URIs for revocation checking could lead to denial of service (bsc#1203556)\n\nFeature changes:\n\n- Enable Marvell plugin (jsc#SLE-20151)\n","status":"published","published":"2022-11-23T11:57:21Z","modified":"2026-02-04T03:32:48.875998Z","updated_at":"2026-11-02T15:53:51.440565Z"},{"id":"USN-5651-1","title":"strongswan vulnerability","description":"Lahav Schlesinger discovered that strongSwan incorrectly handled certain OCSP URIs and\nand CRL distribution points (CDP) in certificates. A remote attacker could\npossibly use this issue to initiate IKE_SAs and send crafted certificates\nthat contain URIs pointing to servers under their control, which can lead\nto a denial-of-service attack.\n","status":"published","published":"2022-10-03T17:35:02Z","modified":"2026-04-27T16:21:20.947089Z","updated_at":"2026-11-02T16:58:16.20937Z"},{"id":"USN-5651-2","title":"strongswan vulnerability","description":"USN-5651-1 fixed a vulnerability in strongSwan. This update provides\nthe corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.\n\nOriginal advisory details:\n\n Lahav Schlesinger discovered that strongSwan incorrectly handled certain OCSP URIs and\n and CRL distribution points (CDP) in certificates. A remote attacker could\n possibly use this issue to initiate IKE_SAs and send crafted certificates\n that contain URIs pointing to servers under their control, which can lead\n to a denial-of-service attack.\n","status":"published","published":"2022-10-03T19:18:27Z","modified":"2026-06-29T13:49:42.773504081Z","updated_at":"2026-11-02T16:58:16.20937Z"}]}}