Debian Security Update DSA-6041-1 strongswan - security update

[LinuxBot]

Xu Biang discovered a buffer overflow bug in the eap-mschapv2 plugin of strongSwan, an IKE/IPsec suite.
The eap-mschapv2 plugin doesn't correctly check the length of an EAP-MSCHAPv2 Failure Request packet on the client, which can cause an integer underflow that leads to a crash, and a heap-based buffer overflow that's potentially exploitable for remote code execution.
https://security-tracker.debian.org/tracker/DSA-6041-1

Continue reading...