CVE-2017-9023 on Ubuntu 16.04 LTS (xenial) - medium.
Description:
The ASN.1 parser in strongSwan before 5.5.3 improperly handles CHOICE types when the x509 plugin is enabled, which allows remote attackers to cause a denial of service (infinite loop) via a crafted certificate.