16 results · Feed
-
High 7.5
In strongSwan before 6.0.7, identity parsing/cloning is mishandled. Parsed EAP-Identities that result in an empty but n…
-
High 8.1
In the eap-mschapv2 plugin (client-side) in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted…
-
Critical 9.8
strongSwan before 5.9.12 has a buffer overflow and possible unauthenticated remote code execution via a DH public value…
-
Critical 9.8
strongSwan 5.9.8 and 5.9.9 potentially allows remote code execution because it uses a variable named "public" for two d…
-
High 7.5
strongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation plugin by sending a craf…
-
Unscored —
In strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early without actually authentica…
-
Unscored —
The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate with an RSASSA-PSS si…
-
Unscored —
The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests w…
-
Unscored —
The gmp plugin in strongSwan before 5.7.1 has a Buffer Overflow via a crafted certificate.
-
High 7.5
In verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c in the gmp plugin in strongSwan 4.x and 5.x before 5.7.0, the …
-
High 7.5
In verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c in the gmp plugin in strongSwan 4.x and 5.x before 5.7.0, the …
-
Unscored —
strongSwan 5.6.0 and older allows Remote Denial of Service because of Missing Initialization of a Variable.
-
Unscored —
In stroke_socket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer underflow, which may …
-
High 7.5
The gmp plugin in strongSwan before 5.6.0 allows remote attackers to cause a denial of service (NULL pointer dereferenc…
-
High 7.5
The gmp plugin in strongSwan before 5.5.3 does not properly validate RSA public keys before calling mpz_powm_sec, which…
-
High 7.5
The ASN.1 parser in strongSwan before 5.5.3 improperly handles CHOICE types when the x509 plugin is enabled, which allo…