CVE-2018-5388: canonical ubuntu_linux Buffer Underflow

Vulnerability summary

CVE-2018-5388 is a medium (CVSS 6.5) Buffer Underflow vulnerability in canonical ubuntu_linux. EPSS estimates a 3.92% chance of exploitation in the next 30 days, higher than 90.1% of scored vulnerabilities.

Timeline

1. 31-05-2018
   PublishedVulnerability first disclosed.
2. 05-08-2024
   Last modifiedVulnerability information updated.

Description

In stroke_socket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer underflow, which may lead to resource exhaustion and denial of service while reading from the socket.

• CWE-124Buffer Underwrite ('Buffer Underflow')The product writes to a buffer using an index or pointer that references a memory location prior to the beginning of the buffer.
• CWE-787Out-of-bounds WriteThe product writes data past the end, or before the beginning, of the intended buffer.