CVE:CVE-2021-41990
CNNVD:CNNVD-202110-1215
strongSwan是瑞士Andreas Steffen个人开发者的一套Linux平台使用的开源的基于IPsec的VPN解决方案。该方案包含X.509公开密钥证书、安全储存私钥、智能卡等认证机制。
StrongSwan 中存在输入验证错误漏洞，该漏洞源于产品未能正确处理RSASSA-PSS签名。攻击者可通过一个不相关的自签名证书导致远程代码执行。StrongSwan 5.9.4 之前版本。
solution:Upgrade strongswan strongswan to a higher version than 5.9.4,and avoid the version [5.6.1,5.9.4); Upgrade debian debian_linux to a higher version than 10.0,11.0,and avoid the version 10.0,11.0; Upgrade fedoraproject fedora to a higher version than 33,34,35,and avoid the version 33,34,35; Upgrade siemens 6gk6108-4am00-2ba2_firmware to a higher version than -; Upgrade siemens 6gk6108-4am00-2da2_firmware to a higher version than -; Upgrade siemens 6gk5804-0ap00-2aa2_firmware to a higher version than -; Upgrade siemens 6gk5812-1aa00-2aa2_firmware to a higher version than -; Upgrade siemens 6gk5812-1ba00-2aa2_firmware to a higher version than -; Upgrade siemens 6gk5816-1aa00-2aa2_firmware to a higher version than -; Upgrade siemens 6gk5816-1ba00-2aa2_firmware to a higher version than -; Upgrade siemens 6gk5826-2ab00-2ab2_firmware to a higher version than -; Upgrade siemens 6gk5874-2aa00-2aa2_firmware to a higher version than -; Upgrade siemens 6gk5874-3aa00-2aa2_firmware to a higher version than -; Upgrade siemens 6gk5876-3aa02-2ba2_firmware to a higher version than -; Upgrade siemens 6gk5876-3aa02-2ea2_firmware to a higher version than -; Upgrade siemens 6gk5876-4aa00-2ba2_firmware to a higher version than -; Upgrade siemens 6gk5876-4aa00-2da2_firmware to a higher version than -; Upgrade siemens 6gk5856-2ea00-3da1_firmware to a higher version than -; Upgrade siemens 6gk5856-2ea00-3aa1_firmware to a higher version than -; Upgrade siemens 6gk5615-0aa00-2aa2_firmware to a higher version than -