summaryrefslogtreecommitdiff
path: root/src
AgeCommit message (Collapse)Author
2021-11-24cert-cache: Prevent crash due to integer overflow/sign change1.3.81.3.71.3.61.3.51.3.41.3.3-epa11.3.31.3.2equuleusTobias Brunner
random() allocates values in the range [0, RAND_MAX], with RAND_MAX usually equaling INT_MAX = 2^31-1. Previously, values between 0 and 31 were added directly to that offset before applying`% CACHE_SIZE` to get an index into the cache array. If the random value was very high, this resulted in an integer overflow and a negative index value and, therefore, an out-of-bounds access of the array and in turn dereferencing invalid pointers when trying to acquire the read lock. This most likely results in a segmentation fault. Fixes: 764e8b2211ce ("reimplemented certificate cache") Fixes: CVE-2021-41991 Signed-off-by: Daniil Baturin <daniil@vyos.io>
2021-11-24Reject RSASSA-PSS params with negative salt lengthTobias Brunner
The `salt_len` member in the struct is of type `ssize_t` because we use negative values for special automatic salt lengths when generating signatures. Not checking this could lead to an integer overflow. The value is assigned to the `len` field of a chunk (`size_t`), which is further used in calculations to check the padding structure and (if that is passed by a matching crafted signature value) eventually a memcpy() that will result in a segmentation fault. Fixes: a22316520b91 ("signature-params: Add functions to parse/build ASN.1 RSASSA-PSS params") Fixes: 7d6b81648b2d ("gmp: Add support for RSASSA-PSS signature verification") Fixes: CVE-2021-41990 Signed-off-by: Daniil Baturin <daniil@baturin.org>
2019-01-02New upstream version 5.7.2Yves-Alexis Perez
2018-10-01New upstream version 5.7.1Yves-Alexis Perez
2018-09-24New upstream version 5.7.0Yves-Alexis Perez
2018-06-04New upstream version 5.6.3Yves-Alexis Perez
2018-02-19New upstream version 5.6.2Yves-Alexis Perez
2017-11-21New upstream version 5.6.1Yves-Alexis Perez
2017-09-01New upstream version 5.6.0Yves-Alexis Perez
2017-05-30New upstream version 5.5.3Yves-Alexis Perez
2017-04-01New upstream version 5.5.2Yves-Alexis Perez
2016-10-20New upstream version 5.5.1Yves-Alexis Perez
2016-07-16Imported Upstream version 5.5.0Yves-Alexis Perez
2016-03-24Imported Upstream version 5.4.0Yves-Alexis Perez
2015-11-26Imported Upstream version 5.3.5Yves-Alexis Perez
2015-11-18Imported Upstream version 5.3.4Yves-Alexis Perez
2015-10-22Imported Upstream version 5.3.3Yves-Alexis Perez
2015-06-08Imported Upstream version 5.3.2Yves-Alexis Perez
2015-06-01Imported Upstream version 5.3.1Yves-Alexis Perez
2015-04-11Imported Upstream version 5.3.0Yves-Alexis Perez
2014-10-21Import upstream release 5.2.1Romain Francoise
2014-07-11Imported Upstream version 5.2.0Yves-Alexis Perez
2014-04-15Import upstream version 5.1.3Romain Francoise
2014-03-11Imported Upstream version 5.1.2Yves-Alexis Perez
2013-11-01Imported Upstream version 5.1.1Yves-Alexis Perez
2013-08-25Imported Upstream version 5.1.0Yves-Alexis Perez
2013-04-30Imported Upstream version 5.0.4Yves-Alexis Perez
2013-04-26Imported Upstream version 5.0.3Yves-Alexis Perez
2013-02-07Imported Upstream version 5.0.2Yves-Alexis Perez
2013-01-02Imported Upstream version 5.0.1Yves-Alexis Perez
2012-06-28Imported Upstream version 4.6.4Yves-Alexis Perez
2011-05-19Imported Upstream version 4.5.2René Mayrhofer
2011-03-05Imported Upstream version 4.5.1René Mayrhofer
2010-11-28[svn-upgrade] new version strongswan (4.5.0)Rene Mayrhofer
2010-08-09[svn-upgrade] new version strongswan (4.4.1)Rene Mayrhofer
2010-05-25[svn-upgrade] Integrating new upstream version, strongswan (4.4.0)Rene Mayrhofer
2010-02-23[svn-upgrade] Integrating new upstream version, strongswan (4.3.6)Rene Mayrhofer
2009-10-21[svn-upgrade] Integrating new upstream version, strongswan (4.3.4)Rene Mayrhofer
2009-06-23[svn-upgrade] Integrating new upstream version, strongswan (4.3.2)Rene Mayrhofer
2009-04-01[svn-upgrade] Integrating new upstream version, strongswan (4.2.14)Rene Mayrhofer
2009-03-22[svn-upgrade] Integrating new upstream version, strongswan (4.2.13)Rene Mayrhofer
2009-02-28[svn-upgrade] Integrating new upstream version, strongswan (4.2.12)Rene Mayrhofer
2008-12-05[svn-upgrade] Integrating new upstream version, strongswan (4.2.9)Rene Mayrhofer
2008-10-29[svn-upgrade] Integrating new upstream version, strongswan (4.2.8)Rene Mayrhofer
2008-07-09[svn-upgrade] Integrating new upstream version, strongswan (4.2.4)Rene Mayrhofer
2008-03-30[svn-upgrade] Integrating new upstream version, strongswan (4.1.11)Rene Mayrhofer
2008-02-07[svn-upgrade] Integrating new upstream version, strongswan (4.1.10)Rene Mayrhofer
2007-10-26[svn-upgrade] Integrating new upstream version, strongswan (4.1.8)Rene Mayrhofer
2007-07-04[svn-upgrade] Integrating new upstream version, strongswan (4.1.4)Rene Mayrhofer
2007-06-03[svn-upgrade] Integrating new upstream version, strongswan (4.1.3)Rene Mayrhofer