CVE-2018-5388

Name of the Vulnerable Software and Affected Versions: strongSwan versions prior to 5.6.3

Description: The issue is caused by a buffer underflow in the stroke socket.c function of the strongSwan IPSEC daemon, due to a missing packet length check. This could allow a remote attacker to cause a denial of service, potentially leading to resource exhaustion.

Recommendations: For strongSwan versions prior to 5.6.3, update to version 5.6.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the stroke socket.c function to minimize the risk of exploitation.