Ubuntu Security Notice USN-5651-1

Ubuntu Security Notice USN-5651-1 Posted Oct 4, 2022 Authored by Ubuntu | Site security.ubuntu.com Ubuntu Security Notice 5651-1 – Lahav Schlesinger discovered that strongSwan incorrectly handled certain OCSP URIs and and CRL distribution points in certificates. A remote attacker could possibly use this issue to initiate IKE_SAs and send crafted certificates that contain URIs pointing to servers under their control, which can lead to a denial-of-service attack.

Read full article on Packet Storm

 


Date:

Categorie(s):