CVE-2022-40617 - CVE House
Back to Database
Status published Unknown CVE-2022-40617

strongSwan before 5.9.8 allows remote attackers to cause a denial...

Vulnerability Description

strongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation plugin by sending a crafted end-entity (and intermediate CA) certificate that contains a CRL/OCSP URL that points to a server (under the attacker's control) that doesn't properly respond but (for example) just does nothing after the initial TCP handshake, or sends an excessive amount of application data.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-40617

Credits & Attribution

No credits recorded in the NVD database.

References

More from strongswan

View All →
CVE-2021-45079
In strongSwan before 5.9.5, a malicious responder can send an...
Critical 9.1
CVE-2021-41991
The in-memory certificate cache in strongSwan before 5.9.4 has a...
High 7.5
CVE-2021-41990
The gmp plugin in strongSwan before 5.9.4 has a remote...
High 7.5
CVE-2018-6459
The rsa_pss_params_parse function in libstrongswan/credentials/keys/signature_params.c in strongSwan 5.6.1 allows remote...
Medium 5.3
CVE-2018-17540
The gmp plugin in strongSwan before 5.7.1 has a Buffer...
High 7.5

Affected Vendor

Affected Software

strongswan, ubuntu linux, debian linux, fedora, stormshield network security
Vulnerable Versions:
0, 14.04, 16.04, 18.04, 20.04, 22.04, 10.0, 11.0, 37, 3.11.1, 4.3.1, 4.5.1

Timeline

Official Publish: October 31st, 2022
Last Modified: May 6th, 2025
Added to House: July 21st, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.