https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 22:56:53 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-02802 bdu:2023-02802 https://cve.radiocsirt.org/vuln/bdu:2023-02802 https://cve.radiocsirt.org/vuln/certfr-2021-avi-928 certfr-2021-avi-928 https://cve.radiocsirt.org/vuln/certfr-2021-avi-928 https://cve.radiocsirt.org/vuln/euvd-2026-31942 EUVD-2026-31942 https://cve.radiocsirt.org/vuln/euvd-2026-31942 https://cve.radiocsirt.org/vuln/fkie_cve-2021-41991 <p>The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests with different certificates to fill the cache and later trigger the replacement of cache entries. The code attempts to select a less-often-used cache entry by means of a random number generator, but this is not done correctly. Remote code execution might be a slight possibility.</p> <p>The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests with different certificates to fill the cache and later trigger the replacement of cache entries. The code attempts to select a less-often-used cache entry by means of a random number generator, but this is not done correctly. Remote code execution might be a slight possibility.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-41991 https://cve.radiocsirt.org/vuln/ghsa-jpr7-w98h-cvgm <p>The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests with different certificates to fill the cache and later trigger the replacement of cache entries. The code attempts to select a less-often-used cache entry by means of a random number generator, but this is not done correctly. Remote code execution might be a slight possibility.</p> <p>The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests with different certificates to fill the cache and later trigger the replacement of cache entries. The code attempts to select a less-often-used cache entry by means of a random number generator, but this is not done correctly. Remote code execution might be a slight possibility.</p> https://cve.radiocsirt.org/vuln/ghsa-jpr7-w98h-cvgm https://cve.radiocsirt.org/vuln/gsd-2021-41991 gsd-2021-41991 https://cve.radiocsirt.org/vuln/gsd-2021-41991 https://cve.radiocsirt.org/vuln/icsa-25-259-03 <p>The gmp plugin in strongSwan before version 5.9.4 has a remote integer overflow vulnerability via a crafted certificate with an RSASSA-PSS signature. For example, this can be triggered by an unrelated self-signed CA certificate sent by an initiator. Remote code execution cannot occur. The in-memory certificate cache in strongSwan before version 5.9.4 has a remote integer overflow vulnerability upon receiving many requests with different certificates to fill the cache and later trigger the replacement of cache entries. The code attempts to select a less-often-used cache entry by means of a random number generator, but this is not done correctly. This could lead to a denial of service (DoS) condition. Remote code execution can&#39;t be excluded completely, but it would require attackers to have control over the dereferenced memory, so it is very unlikely.</p> <p>The gmp plugin in strongSwan before version 5.9.4 has a remote integer overflow vulnerability via a crafted certificate with an RSASSA-PSS signature. For example, this can be triggered by an unrelated self-signed CA certificate sent by an initiator. Remote code execution cannot occur. The in-memory certificate cache in strongSwan before version 5.9.4 has a remote integer overflow vulnerability upon receiving many requests with different certificates to fill the cache and later trigger the replacement of cache entries. The code attempts to select a less-often-used cache entry by means of a random number generator, but this is not done correctly. This could lead to a denial of service (DoS) condition. Remote code execution can&#39;t be excluded completely, but it would require attackers to have control over the dereferenced memory, so it is very unlikely.</p> https://cve.radiocsirt.org/vuln/icsa-25-259-03 https://cve.radiocsirt.org/vuln/msrc_cve-2021-41991 msrc_CVE-2021-41991 https://cve.radiocsirt.org/vuln/msrc_cve-2021-41991 https://cve.radiocsirt.org/vuln/oesa-2021-1408 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: strongswan, openEuler:20.03-LTS-SP2: strongswan</p> <p>The strongSwan IPsec implementation supports both the IKEv1 and IKEv2 key exchange protocols in conjunction with the native NETKEY IPsec stack of the Linux kernel. Security Fix(es): The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate with an RSASSA-PSS signature. For example, this can be triggered by an unrelated self-signed CA certificate sent by an initiator. Remote code execution cannot occur.(CVE-2021-41990) The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests with different certificates to fill the cache and later trigger the replacement of cache entries. The code attempts to select a less-often-used cache entry by means of a random number generator, but this is not done correctly. Remote code execution might be a slight possibility.(CVE-2021-41991)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: strongswan, openEuler:20.03-LTS-SP2: strongswan</p> <p>The strongSwan IPsec implementation supports both the IKEv1 and IKEv2 key exchange protocols in conjunction with the native NETKEY IPsec stack of the Linux kernel. Security Fix(es): The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate with an RSASSA-PSS signature. For example, this can be triggered by an unrelated self-signed CA certificate sent by an initiator. Remote code execution cannot occur.(CVE-2021-41990) The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests with different certificates to fill the cache and later trigger the replacement of cache entries. The code attempts to select a less-often-used cache entry by means of a random number generator, but this is not done correctly. Remote code execution might be a slight possibility.(CVE-2021-41991)</p> https://cve.radiocsirt.org/vuln/oesa-2021-1408 https://cve.radiocsirt.org/vuln/opensuse-su-2021:1399-1 <p>Security update for strongswan</p> <p>Security update for strongswan</p> https://cve.radiocsirt.org/vuln/opensuse-su-2021:1399-1 https://cve.radiocsirt.org/vuln/suse-su-2021:14827-1 <p>Security update for strongswan</p> <p>Security update for strongswan</p> https://cve.radiocsirt.org/vuln/suse-su-2021:14827-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-41991 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: strongswan, Ubuntu:Pro:16.04:LTS: strongswan, Ubuntu:Pro:FIPS:16.04:LTS: strongswan, Ubuntu:18.04:LTS: strongswan, Ubuntu:Pro:FIPS-updates:18.04:LTS: strongswan, Ubuntu:Pro:FIPS:18.04:LTS: strongswan, Ubuntu:20.04:LTS: strongswan, Ubuntu:Pro:FIPS-updates:20.04:LTS: strongswan, Ubuntu:Pro:FIPS:20.04:LTS: strongswan, Ubuntu:22.04:LTS: strongswan</p> <p>The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests with different certificates to fill the cache and later trigger the replacement of cache entries. The code attempts to select a less-often-used cache entry by means of a random number generator, but this is not done correctly. Remote code execution might be a slight possibility.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: strongswan, Ubuntu:Pro:16.04:LTS: strongswan, Ubuntu:Pro:FIPS:16.04:LTS: strongswan, Ubuntu:18.04:LTS: strongswan, Ubuntu:Pro:FIPS-updates:18.04:LTS: strongswan, Ubuntu:Pro:FIPS:18.04:LTS: strongswan, Ubuntu:20.04:LTS: strongswan, Ubuntu:Pro:FIPS-updates:20.04:LTS: strongswan, Ubuntu:Pro:FIPS:20.04:LTS: strongswan, Ubuntu:22.04:LTS: strongswan</p> <p>The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests with different certificates to fill the cache and later trigger the replacement of cache entries. The code attempts to select a less-often-used cache entry by means of a random number generator, but this is not done correctly. Remote code execution might be a slight possibility.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-41991 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1024 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in strongSwan ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in strongSwan ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1024