CVE:CVE-2014-9221
CNNVD:CNNVD-201501-134
strongSwan是瑞士软件开发者Andreas Steffen所维护的一套Linux平台使用的开源的基于IPsec的VPN解决方案。该方案包含X.509公开密钥证书、安全储存私钥、智能卡等认证机制。
strongSwan 4.5.x版本至5.2.1之前5.2.x版本中存在安全漏洞。远程攻击者可借助使用Diffie-Hellman(DH) group 1025功能的特制的IKEv2 Key Exchange(KE)消息利用该漏洞造成拒绝服务（无效的指针引用）。
solution:Upgrade strongswan strongswan to a higher version than 4.5.0,4.5.1,4.5.2,4.5.3,4.6.0,4.6.1,4.6.2,4.6.3,4.6.4,5.0.0,5.0.1,5.0.2,5.0.3,5.0.4,5.1.0,5.1.1,5.1.2,5.1.3,5.2.0,and avoid the version 4.5.0,4.5.1,4.5.2,4.5.3,4.6.0,4.6.1,4.6.2,4.6.3,4.6.4,5.0.0,5.0.1,5.0.2,5.0.3,5.0.4,5.1.0,5.1.1,5.1.2,5.1.3,5.2.0; Upgrade opensuse opensuse to a higher version than 13.1,13.2,and avoid the version 13.1,13.2; Upgrade canonical ubuntu_linux to a higher version than 14.04,14.10,and avoid the version 14.04,14.10; Upgrade fedoraproject fedora to a higher version than 21,and avoid the version 21; Upgrade debian debian_linux to a higher version than 7.0,and avoid the version 7.0