CVE-2021-41991

The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests with different certificates to fill the cache and later trigger the replacement of cache entries. The code attempts to select a less-often-used cache entry by means of a random number generator, but this is not done correctly. Remote code execution might be a slight possibility.
Configurations

Configuration 1 (hide)

cpe:2.3:a:strongswan:strongswan:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*

Configuration 3 (hide)

OR cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*

Configuration 4 (hide)

cpe:2.3:a:siemens:sinema_remote_connect_server:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:h:siemens:siplus_et_200sp_cp_1542sp-1_irc_tx_rail:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:siplus_et_200sp_cp_1542sp-1_irc_tx_rail_firmware:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:h:siemens:simatic_cp_1243-1:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:simatic_cp_1243-1_firmware:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:h:siemens:simatic_cp_1242-7_gprs_v2:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:simatic_cp_1242-7_gprs_v2_firmware:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:h:siemens:simatic_net_cp_1243-8_irc:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:simatic_net_cp_1243-8_irc_firmware:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:h:siemens:scalance_sc632-2c:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_sc632-2c_firmware:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:h:siemens:siplus_et_200sp_cp_1543sp-1_isec:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:siplus_et_200sp_cp_1543sp-1_isec_firmware:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:h:siemens:cp_1543-1:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:cp_1543-1_firmware:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:siemens:simatic_net_cp_1545-1_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_net_cp_1545-1:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:siemens:simatic_cp_1543sp-1_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_cp_1543sp-1:-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND
cpe:2.3:o:siemens:simatic_net_cp1243-7_lte_eu_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_net_cp1243-7_lte_eu:-:*:*:*:*:*:*:*

Configuration 15 (hide)

AND
cpe:2.3:o:siemens:simatic_cp_1243-7_lte\/us_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_cp_1243-7_lte\/us:-:*:*:*:*:*:*:*

Configuration 16 (hide)

AND
cpe:2.3:o:siemens:simatic_cp_1542sp-1_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_cp_1542sp-1:-:*:*:*:*:*:*:*

Configuration 17 (hide)

AND
cpe:2.3:o:siemens:scalance_sc636-2c_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_sc636-2c:-:*:*:*:*:*:*:*

Configuration 18 (hide)

AND
cpe:2.3:o:siemens:simatic_cp_1542sp-1_irc_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_cp_1542sp-1_irc:-:*:*:*:*:*:*:*

Configuration 19 (hide)

AND
cpe:2.3:o:siemens:scalance_sc642-2c_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_sc642-2c:-:*:*:*:*:*:*:*

Configuration 20 (hide)

AND
cpe:2.3:o:siemens:scalance_sc646-2c_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_sc646-2c:-:*:*:*:*:*:*:*

Configuration 21 (hide)

AND
cpe:2.3:o:siemens:scalance_sc622-2c_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_sc622-2c:-:*:*:*:*:*:*:*

Configuration 22 (hide)

AND
cpe:2.3:o:siemens:siplus_s7-1200_cp_1243-1_rail_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siplus_s7-1200_cp_1243-1_rail:-:*:*:*:*:*:*:*

Configuration 23 (hide)

AND
cpe:2.3:o:siemens:siplus_s7-1200_cp_1243-1_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siplus_s7-1200_cp_1243-1:-:*:*:*:*:*:*:*

Configuration 24 (hide)

AND
cpe:2.3:o:siemens:siplus_net_cp_1543-1_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siplus_net_cp_1543-1:-:*:*:*:*:*:*:*

Configuration 25 (hide)

AND
cpe:2.3:o:siemens:siplus_et_200sp_cp_1543sp-1_isec_tx_rail_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siplus_et_200sp_cp_1543sp-1_isec_tx_rail:-:*:*:*:*:*:*:*

History

07 Nov 2023, 03:39

Type Values Removed Values Added
References
  • {'url': 'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Y3TQ32JLJOBJDB2EJKSX2PBPB5NFG2D4/', 'name': 'FEDORA-2021-95fab6a482', 'tags': ['Mailing List', 'Third Party Advisory'], 'refsource': 'FEDORA'}
  • {'url': 'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQSQ3BEC22NF4NCDZVCT4P3Q2ZIAJXGJ/', 'name': 'FEDORA-2021-b3df83339e', 'tags': ['Mailing List', 'Third Party Advisory'], 'refsource': 'FEDORA'}
  • {'url': 'https://www.strongswan.org/blog/2021/10/18/strongswan-vulnerability-(cve-2021-41991).html', 'name': 'https://www.strongswan.org/blog/2021/10/18/strongswan-vulnerability-(cve-2021-41991).html', 'tags': ['Exploit', 'Vendor Advisory'], 'refsource': 'CONFIRM'}
  • {'url': 'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5FJSATD2R2XHTG4P63GCMQ2N7EWKMME5/', 'name': 'FEDORA-2021-0b37146973', 'tags': ['Mailing List', 'Third Party Advisory'], 'refsource': 'FEDORA'}
  • () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WQSQ3BEC22NF4NCDZVCT4P3Q2ZIAJXGJ/ -
  • () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3TQ32JLJOBJDB2EJKSX2PBPB5NFG2D4/ -
  • () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5FJSATD2R2XHTG4P63GCMQ2N7EWKMME5/ -
  • () https://www.strongswan.org/blog/2021/10/18/strongswan-vulnerability-%28cve-2021-41991%29.html -

12 Apr 2022, 18:42

Type Values Removed Values Added
First Time Siemens cp 1543-1 Firmware
Siemens
Siemens simatic Cp 1242-7 Gprs V2
Siemens simatic Cp 1543sp-1
Siemens cp 1543-1
Siemens scalance Sc636-2c
Siemens simatic Net Cp 1545-1 Firmware
Siemens scalance Sc642-2c
Siemens simatic Cp 1542sp-1
Siemens scalance Sc642-2c Firmware
Siemens scalance Sc632-2c Firmware
Siemens scalance Sc632-2c
Siemens scalance Sc636-2c Firmware
Siemens scalance Sc646-2c
Siemens simatic Net Cp 1243-8 Irc
Siemens scalance Sc622-2c Firmware
Siemens siplus S7-1200 Cp 1243-1
Siemens simatic Net Cp1243-7 Lte Eu Firmware
Siemens siplus Et 200sp Cp 1543sp-1 Isec Tx Rail
Siemens sinema Remote Connect Server
Siemens siplus S7-1200 Cp 1243-1 Rail
Siemens simatic Net Cp 1243-8 Irc Firmware
Siemens simatic Cp 1542sp-1 Firmware
Siemens siplus Et 200sp Cp 1542sp-1 Irc Tx Rail
Siemens siplus Et 200sp Cp 1542sp-1 Irc Tx Rail Firmware
Siemens simatic Cp 1542sp-1 Irc
Siemens simatic Cp 1243-7 Lte\/us Firmware
Siemens simatic Cp 1542sp-1 Irc Firmware
Siemens siplus S7-1200 Cp 1243-1 Firmware
Siemens siplus Et 200sp Cp 1543sp-1 Isec
Siemens simatic Cp 1543sp-1 Firmware
Siemens simatic Cp 1243-1
Siemens simatic Net Cp1243-7 Lte Eu
Siemens siplus S7-1200 Cp 1243-1 Rail Firmware
Siemens siplus Net Cp 1543-1 Firmware
Siemens siplus Net Cp 1543-1
Siemens siplus Et 200sp Cp 1543sp-1 Isec Firmware
Siemens simatic Cp 1243-7 Lte\/us
Siemens scalance Sc646-2c Firmware
Siemens simatic Net Cp 1545-1
Siemens simatic Cp 1243-1 Firmware
Siemens scalance Sc622-2c
Siemens simatic Cp 1242-7 Gprs V2 Firmware
Siemens siplus Et 200sp Cp 1543sp-1 Isec Tx Rail Firmware
CPE cpe:2.3:h:siemens:simatic_cp_1542sp-1_irc:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siplus_net_cp_1543-1:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:simatic_cp_1542sp-1_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:siplus_et_200sp_cp_1543sp-1_isec_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:simatic_net_cp1243-7_lte_eu_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:siplus_et_200sp_cp_1542sp-1_irc_tx_rail_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:simatic_cp_1243-1_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:siplus_net_cp_1543-1_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_cp_1242-7_gprs_v2:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_cp_1542sp-1:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:cp_1543-1_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:simatic_cp_1243-7_lte\/us_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:simatic_net_cp_1545-1_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:siplus_s7-1200_cp_1243-1_rail_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_sc632-2c_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_sc632-2c:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_net_cp1243-7_lte_eu:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_cp_1243-7_lte\/us:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siplus_s7-1200_cp_1243-1:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_sc622-2c_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_sc622-2c:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_sc646-2c:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:simatic_net_cp_1243-8_irc_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_sc646-2c_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_sc636-2c:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_sc636-2c_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_cp_1543sp-1:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_net_cp_1545-1:-:*:*:*:*:*:*:*
cpe:2.3:a:siemens:sinema_remote_connect_server:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siplus_et_200sp_cp_1542sp-1_irc_tx_rail:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siplus_et_200sp_cp_1543sp-1_isec:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:cp_1543-1:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:siplus_et_200sp_cp_1543sp-1_isec_tx_rail_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:simatic_cp_1242-7_gprs_v2_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_net_cp_1243-8_irc:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:simatic_cp_1543sp-1_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_cp_1243-1:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:siplus_s7-1200_cp_1243-1_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_sc642-2c_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:simatic_cp_1542sp-1_irc_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siplus_s7-1200_cp_1243-1_rail:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_sc642-2c:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siplus_et_200sp_cp_1543sp-1_isec_tx_rail:-:*:*:*:*:*:*:*
References (CONFIRM) https://cert-portal.siemens.com/productcert/pdf/ssa-539476.pdf - (CONFIRM) https://cert-portal.siemens.com/productcert/pdf/ssa-539476.pdf - Patch, Third Party Advisory

08 Feb 2022, 13:15

Type Values Removed Values Added
References
  • (CONFIRM) https://cert-portal.siemens.com/productcert/pdf/ssa-539476.pdf -

26 Nov 2021, 21:00

Type Values Removed Values Added
References (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Y3TQ32JLJOBJDB2EJKSX2PBPB5NFG2D4/ - (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Y3TQ32JLJOBJDB2EJKSX2PBPB5NFG2D4/ - Mailing List, Third Party Advisory

17 Nov 2021, 22:19

Type Values Removed Values Added
References
  • (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Y3TQ32JLJOBJDB2EJKSX2PBPB5NFG2D4/ -

10 Nov 2021, 01:19

Type Values Removed Values Added
References
  • {'url': 'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Y3TQ32JLJOBJDB2EJKSX2PBPB5NFG2D4/', 'name': 'FEDORA-2021-95fab6a482', 'tags': ['Mailing List', 'Third Party Advisory'], 'refsource': 'FEDORA'}

04 Nov 2021, 12:56

Type Values Removed Values Added
CPE cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*
References (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Y3TQ32JLJOBJDB2EJKSX2PBPB5NFG2D4/ - (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Y3TQ32JLJOBJDB2EJKSX2PBPB5NFG2D4/ - Mailing List, Third Party Advisory
References (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5FJSATD2R2XHTG4P63GCMQ2N7EWKMME5/ - (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5FJSATD2R2XHTG4P63GCMQ2N7EWKMME5/ - Mailing List, Third Party Advisory
References (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQSQ3BEC22NF4NCDZVCT4P3Q2ZIAJXGJ/ - (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQSQ3BEC22NF4NCDZVCT4P3Q2ZIAJXGJ/ - Mailing List, Third Party Advisory

30 Oct 2021, 02:15

Type Values Removed Values Added
References
  • (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Y3TQ32JLJOBJDB2EJKSX2PBPB5NFG2D4/ -

28 Oct 2021, 23:15

Type Values Removed Values Added
References
  • (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQSQ3BEC22NF4NCDZVCT4P3Q2ZIAJXGJ/ -
  • (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5FJSATD2R2XHTG4P63GCMQ2N7EWKMME5/ -

21 Oct 2021, 19:06

Type Values Removed Values Added
References (DEBIAN) https://www.debian.org/security/2021/dsa-4989 - (DEBIAN) https://www.debian.org/security/2021/dsa-4989 - Third Party Advisory
References (CONFIRM) https://www.strongswan.org/blog/2021/10/18/strongswan-vulnerability-(cve-2021-41991).html - (CONFIRM) https://www.strongswan.org/blog/2021/10/18/strongswan-vulnerability-(cve-2021-41991).html - Exploit, Vendor Advisory
References (MLIST) https://lists.debian.org/debian-lts-announce/2021/10/msg00014.html - (MLIST) https://lists.debian.org/debian-lts-announce/2021/10/msg00014.html - Mailing List, Third Party Advisory
References (MISC) https://github.com/strongswan/strongswan/releases/tag/5.9.4 - (MISC) https://github.com/strongswan/strongswan/releases/tag/5.9.4 - Third Party Advisory
CPE cpe:2.3:a:strongswan:strongswan:*:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown
v2 : 5.0
v3 : 7.5
CWE CWE-190

20 Oct 2021, 02:15

Type Values Removed Values Added
References
  • (MLIST) https://lists.debian.org/debian-lts-announce/2021/10/msg00014.html -

19 Oct 2021, 11:15

Type Values Removed Values Added
References
  • (DEBIAN) https://www.debian.org/security/2021/dsa-4989 -

18 Oct 2021, 14:58

Type Values Removed Values Added
New CVE

Information

Published : 2021-10-18 14:15

Updated : 2023-12-10 14:09


NVD link : CVE-2021-41991

Mitre link : CVE-2021-41991

CVE.ORG link : CVE-2021-41991


JSON object : View

Products Affected

siemens

  • simatic_cp_1542sp-1_firmware
  • simatic_cp_1543sp-1_firmware
  • scalance_sc636-2c_firmware
  • cp_1543-1_firmware
  • scalance_sc632-2c_firmware
  • sinema_remote_connect_server
  • siplus_et_200sp_cp_1542sp-1_irc_tx_rail
  • simatic_cp_1542sp-1_irc
  • simatic_cp_1243-1
  • scalance_sc632-2c
  • scalance_sc642-2c
  • simatic_cp_1243-7_lte\/us_firmware
  • siplus_et_200sp_cp_1543sp-1_isec_firmware
  • simatic_net_cp_1545-1_firmware
  • siplus_s7-1200_cp_1243-1_rail
  • simatic_net_cp1243-7_lte_eu
  • scalance_sc642-2c_firmware
  • scalance_sc636-2c
  • simatic_cp_1243-1_firmware
  • cp_1543-1
  • simatic_cp_1543sp-1
  • siplus_et_200sp_cp_1542sp-1_irc_tx_rail_firmware
  • siplus_net_cp_1543-1
  • siplus_et_200sp_cp_1543sp-1_isec_tx_rail_firmware
  • simatic_cp_1242-7_gprs_v2
  • siplus_net_cp_1543-1_firmware
  • siplus_s7-1200_cp_1243-1_firmware
  • simatic_cp_1542sp-1_irc_firmware
  • simatic_cp_1243-7_lte\/us
  • simatic_cp_1542sp-1
  • siplus_s7-1200_cp_1243-1
  • simatic_net_cp_1545-1
  • simatic_cp_1242-7_gprs_v2_firmware
  • scalance_sc622-2c_firmware
  • siplus_s7-1200_cp_1243-1_rail_firmware
  • scalance_sc646-2c
  • simatic_net_cp1243-7_lte_eu_firmware
  • scalance_sc622-2c
  • simatic_net_cp_1243-8_irc
  • siplus_et_200sp_cp_1543sp-1_isec_tx_rail
  • siplus_et_200sp_cp_1543sp-1_isec
  • scalance_sc646-2c_firmware
  • simatic_net_cp_1243-8_irc_firmware

fedoraproject

  • fedora

strongswan

  • strongswan

debian

  • debian_linux
CWE
CWE-190

Integer Overflow or Wraparound