CVE-2018-5388

strongswan: integer underflow leads to buffer overflow and denial of service in stroke_socket.c

Loading…

Severity

Moderate

Red Hat Product Security

5.5

CVSS 3.0

Review impact separately from score.

Published · May 22, 2018

Updated · June 27, 2026

Description

An integer underflow has been discovered in strongSwan VPN's charon server, which could lead to a buffer overflow and consequent crash. A local attacker, with enough privileges to access the Unix Domain Socket /var/run/charon.ctl, could use this vulnerability to crash the charon server.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

On Red Hat Enterprise Linux 7 only root has access to /var/run/charon.ctl so you need to be already root to exploit the vulnerability.

CVSS / CWE

CVSS 3.0 · 5.5
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-191 · Integer Underflow (Wrap or Wraparound)