https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 08:19:50 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-07353 bdu:2024-07353 https://cve.radiocsirt.org/vuln/bdu:2024-07353 https://cve.radiocsirt.org/vuln/certfr-2022-avi-879 certfr-2022-avi-879 https://cve.radiocsirt.org/vuln/certfr-2022-avi-879 https://cve.radiocsirt.org/vuln/cnvd-2022-87372 cnvd-2022-87372 https://cve.radiocsirt.org/vuln/cnvd-2022-87372 https://cve.radiocsirt.org/vuln/euvd-2026-237962 EUVD-2026-237962 https://cve.radiocsirt.org/vuln/euvd-2026-237962 https://cve.radiocsirt.org/vuln/fkie_cve-2022-40617 <p>strongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation plugin by sending a crafted end-entity (and intermediate CA) certificate that contains a CRL/OCSP URL that points to a server (under the attacker&#39;s control) that doesn&#39;t properly respond but (for example) just does nothing after the initial TCP handshake, or sends an excessive amount of application data.</p> <p>strongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation plugin by sending a crafted end-entity (and intermediate CA) certificate that contains a CRL/OCSP URL that points to a server (under the attacker&#39;s control) that doesn&#39;t properly respond but (for example) just does nothing after the initial TCP handshake, or sends an excessive amount of application data.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-40617 https://cve.radiocsirt.org/vuln/ghsa-f2x8-4jwf-gqrg <p>strongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation plugin by sending a crafted end-entity (and intermediate CA) certificate that contains a CRL/OCSP URL that points to a server (under the attacker&#39;s control) that doesn&#39;t properly respond but (for example) just does nothing after the initial TCP handshake, or sends an excessive amount of application data.</p> <p>strongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation plugin by sending a crafted end-entity (and intermediate CA) certificate that contains a CRL/OCSP URL that points to a server (under the attacker&#39;s control) that doesn&#39;t properly respond but (for example) just does nothing after the initial TCP handshake, or sends an excessive amount of application data.</p> https://cve.radiocsirt.org/vuln/ghsa-f2x8-4jwf-gqrg https://cve.radiocsirt.org/vuln/gsd-2022-40617 gsd-2022-40617 https://cve.radiocsirt.org/vuln/gsd-2022-40617 https://cve.radiocsirt.org/vuln/msrc_cve-2022-40617 msrc_CVE-2022-40617 https://cve.radiocsirt.org/vuln/msrc_cve-2022-40617 https://cve.radiocsirt.org/vuln/oesa-2022-2034 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: strongswan, openEuler:20.03-LTS-SP3: strongswan, openEuler:22.03-LTS: strongswan</p> <p>The strongSwan IPsec implementation supports both the IKEv1 and IKEv2 key exchange protocols in conjunction with the native NETKEY IPsec stack of the Linux kernel. Security Fix(es): strongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation plugin by sending a crafted end-entity (and intermediate CA) certificate that contains a CRL/OCSP URL that points to a server (under the attacker&amp;apos;s control) that doesn&amp;apos;t properly respond but (for example) just does nothing after the initial TCP handshake, or sends an excessive amount of application data.(CVE-2022-40617)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: strongswan, openEuler:20.03-LTS-SP3: strongswan, openEuler:22.03-LTS: strongswan</p> <p>The strongSwan IPsec implementation supports both the IKEv1 and IKEv2 key exchange protocols in conjunction with the native NETKEY IPsec stack of the Linux kernel. Security Fix(es): strongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation plugin by sending a crafted end-entity (and intermediate CA) certificate that contains a CRL/OCSP URL that points to a server (under the attacker&amp;apos;s control) that doesn&amp;apos;t properly respond but (for example) just does nothing after the initial TCP handshake, or sends an excessive amount of application data.(CVE-2022-40617)</p> https://cve.radiocsirt.org/vuln/oesa-2022-2034 https://cve.radiocsirt.org/vuln/suse-su-2022:4159-1 <p>Security update for strongswan</p> <p>Security update for strongswan</p> https://cve.radiocsirt.org/vuln/suse-su-2022:4159-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-40617 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: strongswan, Ubuntu:Pro:16.04:LTS: strongswan, Ubuntu:Pro:FIPS:16.04:LTS: strongswan, Ubuntu:18.04:LTS: strongswan, Ubuntu:Pro:FIPS-updates:18.04:LTS: strongswan, Ubuntu:Pro:FIPS:18.04:LTS: strongswan, Ubuntu:20.04:LTS: strongswan, Ubuntu:Pro:FIPS-updates:20.04:LTS: strongswan, Ubuntu:Pro:FIPS:20.04:LTS: strongswan, Ubuntu:22.04:LTS: strongswan</p> <p>strongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation plugin by sending a crafted end-entity (and intermediate CA) certificate that contains a CRL/OCSP URL that points to a server (under the attacker&#39;s control) that doesn&#39;t properly respond but (for example) just does nothing after the initial TCP handshake, or sends an excessive amount of application data.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: strongswan, Ubuntu:Pro:16.04:LTS: strongswan, Ubuntu:Pro:FIPS:16.04:LTS: strongswan, Ubuntu:18.04:LTS: strongswan, Ubuntu:Pro:FIPS-updates:18.04:LTS: strongswan, Ubuntu:Pro:FIPS:18.04:LTS: strongswan, Ubuntu:20.04:LTS: strongswan, Ubuntu:Pro:FIPS-updates:20.04:LTS: strongswan, Ubuntu:Pro:FIPS:20.04:LTS: strongswan, Ubuntu:22.04:LTS: strongswan</p> <p>strongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation plugin by sending a crafted end-entity (and intermediate CA) certificate that contains a CRL/OCSP URL that points to a server (under the attacker&#39;s control) that doesn&#39;t properly respond but (for example) just does nothing after the initial TCP handshake, or sends an excessive amount of application data.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-40617 https://cve.radiocsirt.org/vuln/vde-2023-001 <p>A new LTS Firmware release fixes known vulnerabilities in used open-source libraries. In addition, the following improvements have been implemented: HMI - Hardening against DoS attacks. - Hardening against memory leak problems in case of network attacks. WBM - Umlauts in the password of the &#39;User Manager&#39; were not handled correctly. The password rule for upper and lower case was not followed. This could lead to unintentionally weaker passwords.- Hardening of WBM against Cross-Site-Scripting. User Manager - In security notifications &#39;SecurityToken&#39; was always displayed as &#39;0000000&#39; when creating or modifying users.- Hardening of Trust and Identity Stores.</p> <p>A new LTS Firmware release fixes known vulnerabilities in used open-source libraries. In addition, the following improvements have been implemented: HMI - Hardening against DoS attacks. - Hardening against memory leak problems in case of network attacks. WBM - Umlauts in the password of the &#39;User Manager&#39; were not handled correctly. The password rule for upper and lower case was not followed. This could lead to unintentionally weaker passwords.- Hardening of WBM against Cross-Site-Scripting. User Manager - In security notifications &#39;SecurityToken&#39; was always displayed as &#39;0000000&#39; when creating or modifying users.- Hardening of Trust and Identity Stores.</p> https://cve.radiocsirt.org/vuln/vde-2023-001 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1598 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in strongSwan und Ubuntu Linux ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in strongSwan und Ubuntu Linux ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1598