In stroke_socket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer underflow, which may lead to resource exhaustion and denial of service while reading from the socket.
The product writes to a buffer using an index or pointer that references a memory location prior to the beginning of the buffer.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Strongswan | Strongswan | * | 5.6.3 (excluding) |
| Strongswan | Ubuntu | artful | * |
| Strongswan | Ubuntu | bionic | * |
| Strongswan | Ubuntu | devel | * |
| Strongswan | Ubuntu | trusty | * |
| Strongswan | Ubuntu | upstream | * |
| Strongswan | Ubuntu | xenial | * |