strongSwan 5.2.2 and 5.3.0 allows remote attackers to cause a denial of service (daemon crash) or execute arbitrary code.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - strongSwan 5.2.2 and 5.3.0 allows remote attackers to cause a denial of service (daemon crash) or execute
    arbitrary code. (CVE-2015-3991)

New upstream release 5.3.2. Fixes CVE-2014-9221 and CVE-2015-3991.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

StrongSwan Project reports

A denial-of-service and potential remote code execution vulnerability triggered by crafted IKE messages was discovered in strongSwan.
Versions 5.2.2 and 5.3.0 are affected.

ID	Name	Product	Family	Severity
401121	Alpine: multiple py3-vici packages, multiple strongswan packages: security update to 5.3.0-r2 (deprecated)	Tenable Cloud Security	Alpine Linux Local Security Checks	critical
401121	Alpine: multiple py3-vici packages, multiple strongswan packages: security update to 5.3.0-r2 (deprecated)	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	critical
85561	Fedora 22 : strongswan-5.3.2-1.fc22 (2015-5279)	Nessus	Fedora Local Security Checks	critical
85560	Fedora 21 : strongswan-5.3.2-1.fc21 (2015-5247)	Nessus	Fedora Local Security Checks	critical
84069	FreeBSD : strongswan -- Denial-of-service and potential remote code execution vulnerability (55363e65-0e71-11e5-8027-00167671dd1d)	Nessus	FreeBSD Local Security Checks	critical

Detections

Analytics

CVE-2015-3991

critical

Tenable Plugins

critical

critical

critical

critical

critical