diff options
| author | Tobias Brunner <tobias@strongswan.org> | 2015-05-15 11:15:57 +0200 |
|---|---|---|
| committer | Andreas Steffen <andreas.steffen@strongswan.org> | 2015-06-01 09:42:11 +0200 |
| commit | 150764743486aad072351774ad8476e1843095f0 (patch) | |
| tree | f56d9a03c479e7d906ccfb8a4e9441444dc341a5 /src/libcharon/plugins/attr_sql/attr_sql_plugin.c | |
| parent | 62e0abe7591489c563c3d4380054050af9cb4838 (diff) | |
| download | strongswan-150764743486aad072351774ad8476e1843095f0.tar.bz2 strongswan-150764743486aad072351774ad8476e1843095f0.tar.xz | |
unknown-payload: Use a new private payload type and make original type available
This fixes a DoS and potential remote code execution vulnerability that was
caused because the original payload type that was returned previously was
used to cast such payload objects to payloads of the indicated type (e.g.
when logging notify payloads with a payload type for the wrong IKE version).
Fixes CVE-2015-3991.
Diffstat (limited to 'src/libcharon/plugins/attr_sql/attr_sql_plugin.c')
0 files changed, 0 insertions, 0 deletions