Date: Fri, 24 Nov 2023 08:32:32 GMT From: Eugene Grosbein <eugen@FreeBSD.org> To: ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-main@FreeBSD.org Subject: git: 8c6ee1a1c2df - main - security/vuxml: document strongSwan vulnerability CVE-2023-41913 Message-ID: <202311240832.3AO8WWhW062543@gitrepo.freebsd.org>
next in thread | raw e-mail | index | archive | help
The branch main has been updated by eugen: URL: https://cgit.FreeBSD.org/ports/commit/?id=8c6ee1a1c2df0d7a769c1fd50f0366ded3798e86 commit 8c6ee1a1c2df0d7a769c1fd50f0366ded3798e86 Author: Eugene Grosbein <eugen@FreeBSD.org> AuthorDate: 2023-11-24 08:28:51 +0000 Commit: Eugene Grosbein <eugen@FreeBSD.org> CommitDate: 2023-11-24 08:32:26 +0000 security/vuxml: document strongSwan vulnerability CVE-2023-41913 Security: a62c0c50-8aa0-11ee-ac0d-00e0670f2660 Security: CVE-2023-41913 --- security/vuxml/vuln/2023.xml | 30 ++++++++++++++++++++++++++++++ 1 file changed, 30 insertions(+) diff --git a/security/vuxml/vuln/2023.xml b/security/vuxml/vuln/2023.xml index b63a1801c930..8af2a3873920 100644 --- a/security/vuxml/vuln/2023.xml +++ b/security/vuxml/vuln/2023.xml @@ -1,3 +1,33 @@ + <vuln vid="a62c0c50-8aa0-11ee-ac0d-00e0670f2660"> + <topic>strongSwan -- vulnerability in charon-tkm</topic> + <affects> + <package> + <name>strongswan</name> + <range><ge>5.3.0</ge><lt>5.9.11_3</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml">; + <p>strongSwan reports:</p> + <blockquote cite="https://www.strongswan.org/blog/2023/11/20/strongswan-vulnerability-(cve-2023-41913).html">; + <p>A vulnerability in charon-tkm related to processing + DH public values was discovered in strongSwan + that can result in a buffer overflow and potentially + remote code execution. All versions since + 5.3.0 are affected.</p> + </blockquote> + </body> + </description> + <references> + <cvename>CVE-2023-41913</cvename> + <url>https://www.strongswan.org/blog/2023/11/20/strongswan-vulnerability-(cve-2023-41913).html</url>; + </references> + <dates> + <discovery>2023-11-20</discovery> + <entry>2023-11-24</entry> + </dates> + </vuln> + <vuln vid="147353a3-c33b-46d1-b751-e72c0d7f29df"> <topic>electron{25,26} -- use after free in Garbage Collection</topic> <affects>
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?202311240832.3AO8WWhW062543>