summaryrefslogtreecommitdiff
path: root/src/libstrongswan/credentials/sets
AgeCommit message (Collapse)Author
2021-11-24cert-cache: Prevent crash due to integer overflow/sign change1.3.81.3.71.3.61.3.51.3.41.3.3-epa11.3.31.3.2equuleusTobias Brunner
random() allocates values in the range [0, RAND_MAX], with RAND_MAX usually equaling INT_MAX = 2^31-1. Previously, values between 0 and 31 were added directly to that offset before applying`% CACHE_SIZE` to get an index into the cache array. If the random value was very high, this resulted in an integer overflow and a negative index value and, therefore, an out-of-bounds access of the array and in turn dereferencing invalid pointers when trying to acquire the read lock. This most likely results in a segmentation fault. Fixes: 764e8b2211ce ("reimplemented certificate cache") Fixes: CVE-2021-41991 Signed-off-by: Daniil Baturin <daniil@vyos.io>
2018-06-04New upstream version 5.6.3Yves-Alexis Perez
2018-02-19New upstream version 5.6.2Yves-Alexis Perez
2017-11-21New upstream version 5.6.1Yves-Alexis Perez
2017-05-30New upstream version 5.5.3Yves-Alexis Perez
2017-04-01New upstream version 5.5.2Yves-Alexis Perez
2016-10-20New upstream version 5.5.1Yves-Alexis Perez
2016-07-16Imported Upstream version 5.5.0Yves-Alexis Perez
2015-10-22Imported Upstream version 5.3.3Yves-Alexis Perez
2015-04-11Imported Upstream version 5.3.0Yves-Alexis Perez
2014-07-11Imported Upstream version 5.2.0Yves-Alexis Perez
2014-04-15Import upstream version 5.1.3Romain Francoise
2013-04-26Imported Upstream version 5.0.3Yves-Alexis Perez
2013-02-07Imported Upstream version 5.0.2Yves-Alexis Perez
2013-01-02Imported Upstream version 5.0.1Yves-Alexis Perez
2012-06-28Imported Upstream version 4.6.4Yves-Alexis Perez
2011-03-05Imported Upstream version 4.5.1René Mayrhofer
2010-11-28[svn-upgrade] new version strongswan (4.5.0)Rene Mayrhofer
2010-08-09[svn-upgrade] new version strongswan (4.4.1)Rene Mayrhofer
generated by cgit v1.2.3 (git 2.39.1) at 2025-01-24 14:16:45 +0000