https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T12:24:16.279652+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-07353 bdu:2024-07353 2026-10-02T12:24:16.438252+00:00 bdu:2024-07353 https://cve.radiocsirt.org/vuln/certfr-2022-avi-879 certfr-2022-avi-879 — Une vulnérabilité a été découverte dans strongSwan. Elle permet à un attaquant de provoquer un déni de service à distan… 2026-10-02T12:24:16.438289+00:00 certfr-2022-avi-879 https://cve.radiocsirt.org/vuln/cnvd-2022-87372 cnvd-2022-87372 2026-10-02T12:24:16.438308+00:00 cnvd-2022-87372 https://cve.radiocsirt.org/vuln/euvd-2026-237962 EUVD-2026-237962 2026-10-02T12:24:16.438320+00:00 EUVD-2026-237962 https://cve.radiocsirt.org/vuln/fkie_cve-2022-40617 fkie_cve-2022-40617 2026-10-02T12:24:16.438330+00:00

strongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation plugin by sending a crafted end-entity (and intermediate CA) certificate that contains a CRL/OCSP URL that points to a server (under the attacker's control) that doesn't properly respond but (for example) just does nothing after the initial TCP handshake, or sends an excessive amount of application data.

 https://cve.radiocsirt.org/vuln/ghsa-f2x8-4jwf-gqrg GHSA-f2x8-4jwf-gqrg 2026-10-02T12:24:16.438360+00:00

strongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation plugin by sending a crafted end-entity (and intermediate CA) certificate that contains a CRL/OCSP URL that points to a server (under the attacker's control) that doesn't properly respond but (for example) just does nothing after the initial TCP handshake, or sends an excessive amount of application data.

 https://cve.radiocsirt.org/vuln/gsd-2022-40617 gsd-2022-40617 2026-10-02T12:24:16.438376+00:00 gsd-2022-40617 https://cve.radiocsirt.org/vuln/msrc_cve-2022-40617 msrc_CVE-2022-40617 — strongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation plugin by sending a craf… 2026-10-02T12:24:16.438386+00:00 msrc_CVE-2022-40617 https://cve.radiocsirt.org/vuln/oesa-2022-2034 OESA-2022-2034 — strongswan security update 2026-10-02T12:24:16.438401+00:00

Affected: openEuler:20.03-LTS-SP1: strongswan, openEuler:20.03-LTS-SP3: strongswan, openEuler:22.03-LTS: strongswan

The strongSwan IPsec implementation supports both the IKEv1 and IKEv2 key exchange protocols in conjunction with the native NETKEY IPsec stack of the Linux kernel. Security Fix(es): strongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation plugin by sending a crafted end-entity (and intermediate CA) certificate that contains a CRL/OCSP URL that points to a server (under the attacker's control) that doesn't properly respond but (for example) just does nothing after the initial TCP handshake, or sends an excessive amount of application data.(CVE-2022-40617)

 https://cve.radiocsirt.org/vuln/suse-su-2022:4159-1 SUSE-SU-2022:4159-1 — Security update for strongswan 2026-10-02T12:24:16.438430+00:00

Security update for strongswan

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-40617 UBUNTU-CVE-2022-40617 2026-10-02T12:24:16.438445+00:00

Affected: Ubuntu:Pro:14.04:LTS: strongswan, Ubuntu:Pro:16.04:LTS: strongswan, Ubuntu:Pro:FIPS:16.04:LTS: strongswan, Ubuntu:18.04:LTS: strongswan, Ubuntu:Pro:FIPS-updates:18.04:LTS: strongswan, Ubuntu:Pro:FIPS:18.04:LTS: strongswan, Ubuntu:20.04:LTS: strongswan, Ubuntu:Pro:FIPS-updates:20.04:LTS: strongswan, Ubuntu:Pro:FIPS:20.04:LTS: strongswan, Ubuntu:22.04:LTS: strongswan

strongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation plugin by sending a crafted end-entity (and intermediate CA) certificate that contains a CRL/OCSP URL that points to a server (under the attacker's control) that doesn't properly respond but (for example) just does nothing after the initial TCP handshake, or sends an excessive amount of application data.

 https://cve.radiocsirt.org/vuln/vde-2023-001 VDE-2023-001 — PHOENIX CONTACT: Multiple Vulnerabilities in PLCnext Firmware 2026-10-02T12:24:16.438479+00:00

A new LTS Firmware release fixes known vulnerabilities in used open-source libraries. In addition, the following improvements have been implemented: HMI - Hardening against DoS attacks. - Hardening against memory leak problems in case of network attacks. WBM - Umlauts in the password of the 'User Manager' were not handled correctly. The password rule for upper and lower case was not followed. This could lead to unintentionally weaker passwords.- Hardening of WBM against Cross-Site-Scripting. User Manager - In security notifications 'SecurityToken' was always displayed as '0000000' when creating or modifying users.- Hardening of Trust and Identity Stores.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1598 WID-SEC-W-2022-1598 — strongSwan: Schwachstelle ermöglicht Denial of Service 2026-10-02T12:24:16.438517+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in strongSwan und Ubuntu Linux ausnutzen, um einen Denial of Service Angriff durchzuführen.