CRITICAL 9.8 Microsoft
CVE-2023-26463
strongSwan 5.9.8 and 5.9.9 potentially allows remote code execution because it uses a variable named "public" for two different purposes within the same function. There is initially incorrect access control later followed by an expired pointer dereference. One attack vector is sending an untrusted client certificate during EAP-TLS. A server is affected only if it loads plugins that implement TLS-based EAP methods (EAP-TLS EAP-TTLS EAP-PEAP or EAP-TNC). This is fixed in 5.9.10.
Microsoft Security Update 2023-Apr: strongSwan 5.9.8 and 5.9.9 potentially allows remote code execution because it uses a variable named "public" for two different purposes within the same function. There is initially incorrect access control later followed by an expired pointer dereference. One attack vector is sending an untrusted client certificate during EAP-TLS. A server is affected only if it loads plugins that implement TLS-based EAP methods (EAP-TLS EAP-TTLS EAP-PEAP or EAP-TNC). This is fixed in 5.9.10.
Affected Products
- cbl2 strongswan 5.9.10-1 on CBL Mariner 2.0
References
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-26463
- https://nvd.nist.gov/vuln/detail/CVE-2023-26463
This critical severity vulnerability with a CVSS score of 9.8 was published on 2023-04-11 via Microsoft. Affected: cbl2 strongswan 5.9.10-1 on CBL Mariner 2.0.
Risk Timeline
CVE Disclosed2023-04-11 · 1296 days ago
Remediation Resources
Official Advisory
msrc.microsoft.com/update-guide/vulnerability/CVE-2023-26463NVD / MITRE
nvd.nist.gov/vuln/detail/CVE-2023-26463Related Vulnerabilities
| CVE | Title | Severity | CVSS |
|---|---|---|---|
| CVE-2025-49844 PoC | Redis Lua Use-After-Free may lead to remote code execution | CRITICAL | 9.9 |
| CVE-2020-19692 | Buffer Overflow vulnerabilty found in Nginx NJS v.0feca92 allows a remote attack | CRITICAL | 9.8 |
| CVE-2020-19695 | Buffer Overflow found in Nginx NJS allows a remote attacker to execute arbitrary | CRITICAL | 9.8 |
| CVE-2021-28235 | Authentication vulnerability found in Etcd-io v.3.4.10 allows remote attackers t | CRITICAL | 9.8 |
| CVE-2023-24538 PoC | Backticks not treated as string delimiters in html/template | CRITICAL | 9.8 |
| CVE-2023-24540 | Improper handling of JavaScript whitespace in html/template | CRITICAL | 9.8 |
vulnfeed aggregates 16756 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.