CVE-2017-9023 — n/a / n/a

Description (CNA)

The ASN.1 parser in strongSwan before 5.5.3 improperly handles CHOICE types when the x509 plugin is enabled, which allows remote attackers to cause a denial of service (infinite loop) via a crafted certificate.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

http://www.securityfocus.com/bid/98756
https://www.strongswan.org/blog/2017/05/30/strongswan-vulnerability-%28cve-2017-9023%29.html
http://www.debian.org/security/2017/dsa-3866
http://www.ubuntu.com/usn/USN-3301-1

ADP enrichment

CVE

No English description supplied.

http://www.securityfocus.com/bid/98756
https://www.strongswan.org/blog/2017/05/30/strongswan-vulnerability-%28cve-2017-9023%29.html
http://www.debian.org/security/2017/dsa-3866
http://www.ubuntu.com/usn/USN-3301-1

CISA-ADP

No English description supplied.

No references supplied.