CVE:CVE-2021-41991
CNNVD:CNNVD-202110-1214
strongSwan是瑞士Andreas Steffen个人开发者的一套Linux平台使用的开源的基于IPsec的VPN解决方案。该方案包含X.509公开密钥证书、安全储存私钥、智能卡等认证机制。
StrongSwan 中存在输入验证错误漏洞，该漏洞源于产品使用随机数生成器生成缓存条数。攻击者可通过多个请求填充缓存并替换缓存导致服务错误或远程代码执行。以下产品及版本受到影响：StrongSwan  5.9.4 之前版本。
solution:Upgrade strongswan strongswan to a higher version than 5.9.4,and avoid the version [4.2.10,5.9.4); Upgrade debian debian_linux to a higher version than 9.0,10.0,11.0,and avoid the version 9.0,10.0,11.0; Upgrade fedoraproject fedora to a higher version than 33,34,35,and avoid the version 33,34,35; Upgrade siemens sinema_remote_connect_server to a higher version than -; Upgrade siemens siplus_et_200sp_cp_1542sp-1_irc_tx_rail_firmware to a higher version than -; Upgrade siemens simatic_cp_1243-1_firmware to a higher version than -; Upgrade siemens simatic_cp_1242-7_gprs_v2_firmware to a higher version than -; Upgrade siemens simatic_net_cp_1243-8_irc_firmware to a higher version than -; Upgrade siemens scalance_sc632-2c_firmware to a higher version than -; Upgrade siemens siplus_et_200sp_cp_1543sp-1_isec_firmware to a higher version than -; Upgrade siemens cp_1543-1_firmware to a higher version than -; Upgrade siemens simatic_net_cp_1545-1_firmware to a higher version than -; Upgrade siemens simatic_cp_1543sp-1_firmware to a higher version than -; Upgrade siemens simatic_net_cp1243-7_lte_eu_firmware to a higher version than -; Upgrade siemens simatic_cp_1243-7_lte/us_firmware to a higher version than -; Upgrade siemens simatic_cp_1542sp-1_firmware to a higher version than -; Upgrade siemens scalance_sc636-2c_firmware to a higher version than -; Upgrade siemens simatic_cp_1542sp-1_irc_firmware to a higher version than -; Upgrade siemens scalance_sc642-2c_firmware to a higher version than -; Upgrade siemens scalance_sc646-2c_firmware to a higher version than 2.3,and avoid the version (,2.3); Upgrade siemens scalance_sc622-2c_firmware to a higher version than -; Upgrade siemens siplus_s7-1200_cp_1243-1_rail_firmware to a higher version than -; Upgrade siemens siplus_s7-1200_cp_1243-1_firmware to a higher version than -; Upgrade siemens siplus_net_cp_1543-1_firmware to a higher version than -; Upgrade siemens siplus_et_200sp_cp_1543sp-1_isec_tx_rail_firmware to a higher version than -