CVE:CVE-2021-45079
CNNVD:CNNVD-202201-2248
strongSwan是瑞士Andreas Steffen个人开发者的一套Linux平台使用的开源的基于IPsec的VPN解决方案。该方案包含X.509公开密钥证书、安全储存私钥、智能卡等认证机制。
strongSwan 存在代码问题漏洞，攻击者可以通过 EAP Authentication Client 绕过 StrongSwan 的限制，以获得用户权限。
solution:Upgrade strongswan strongswan to a higher version than 5.9.5,and avoid the version [4.1.2,5.9.5); Upgrade debian debian_linux to a higher version than 9.0,10.0,11.0,and avoid the version 9.0,10.0,11.0; Upgrade fedoraproject extra_packages_for_enterprise_linux to a higher version than 7.0,8.0,9.0,and avoid the version 7.0,8.0,9.0; Upgrade fedoraproject fedora to a higher version than 34,35,and avoid the version 34,35; Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,18.04,20.04,21.10,and avoid the version 14.04,16.04,18.04,20.04,21.10