vyos-strongswan.git/src/libstrongswan/credentials/sets, branch 1.3.3

cert-cache: Prevent crash due to integer overflow/sign change

2021-11-24T15:17:39+00:00

random() allocates values in the range [0, RAND_MAX], with RAND_MAX usually equaling INT_MAX = 2^31-1. Previously, values between 0 and 31 were added directly to that offset before applying`% CACHE_SIZE` to get an index into the cache array. If the random value was very high, this resulted in an integer overflow and a negative index value and, therefore, an out-of-bounds access of the array and in turn dereferencing invalid pointers when trying to acquire the read lock. This most likely results in a segmentation fault. Fixes: 764e8b2211ce ("reimplemented certificate cache") Fixes: CVE-2021-41991 Signed-off-by: Daniil Baturin

New upstream version 5.6.3

2018-06-04T07:59:21+00:00

New upstream version 5.6.2

2018-02-19T17:17:21+00:00

New upstream version 5.6.1

2017-11-21T09:22:31+00:00

New upstream version 5.5.3

2017-05-30T18:59:31+00:00

New upstream version 5.5.2

2017-04-01T14:26:44+00:00

New upstream version 5.5.1

2016-10-20T14:18:38+00:00

Imported Upstream version 5.5.0

2016-07-16T13:19:53+00:00

Imported Upstream version 5.3.3

2015-10-22T09:43:58+00:00

Imported Upstream version 5.3.0

2015-04-11T20:03:59+00:00