https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 22:00:19 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-02129 bdu:2023-02129 https://cve.radiocsirt.org/vuln/bdu:2023-02129 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0185 certfr-2023-avi-0185 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0185 https://cve.radiocsirt.org/vuln/euvd-2026-216352 EUVD-2026-216352 https://cve.radiocsirt.org/vuln/euvd-2026-216352 https://cve.radiocsirt.org/vuln/fkie_cve-2023-26463 <p>strongSwan 5.9.8 and 5.9.9 potentially allows remote code execution because it uses a variable named &#34;public&#34; for two different purposes within the same function. There is initially incorrect access control, later followed by an expired pointer dereference. One attack vector is sending an untrusted client certificate during EAP-TLS. A server is affected only if it loads plugins that implement TLS-based EAP methods (EAP-TLS, EAP-TTLS, EAP-PEAP, or EAP-TNC). This is fixed in 5.9.10.</p> <p>strongSwan 5.9.8 and 5.9.9 potentially allows remote code execution because it uses a variable named &#34;public&#34; for two different purposes within the same function. There is initially incorrect access control, later followed by an expired pointer dereference. One attack vector is sending an untrusted client certificate during EAP-TLS. A server is affected only if it loads plugins that implement TLS-based EAP methods (EAP-TLS, EAP-TTLS, EAP-PEAP, or EAP-TNC). This is fixed in 5.9.10.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-26463 https://cve.radiocsirt.org/vuln/ghsa-vcx9-7pcc-q8c7 <p>strongSwan 5.9.8 and 5.9.9 potentially allows remote code execution because it uses a variable named &#34;public&#34; for two different purposes within the same function. There is initially incorrect access control, later followed by an expired pointer dereference. One attack vector is sending an untrusted client certificate during EAP-TLS. A server is affected only if it loads plugins that implement TLS-based EAP methods (EAP-TLS, EAP-TTLS, EAP-PEAP, or EAP-TNC). This is fixed in 5.9.10.</p> <p>strongSwan 5.9.8 and 5.9.9 potentially allows remote code execution because it uses a variable named &#34;public&#34; for two different purposes within the same function. There is initially incorrect access control, later followed by an expired pointer dereference. One attack vector is sending an untrusted client certificate during EAP-TLS. A server is affected only if it loads plugins that implement TLS-based EAP methods (EAP-TLS, EAP-TTLS, EAP-PEAP, or EAP-TNC). This is fixed in 5.9.10.</p> https://cve.radiocsirt.org/vuln/ghsa-vcx9-7pcc-q8c7 https://cve.radiocsirt.org/vuln/gsd-2023-26463 gsd-2023-26463 https://cve.radiocsirt.org/vuln/gsd-2023-26463 https://cve.radiocsirt.org/vuln/msrc_cve-2023-26463 msrc_CVE-2023-26463 https://cve.radiocsirt.org/vuln/msrc_cve-2023-26463 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12749-1 <p>strongswan-5.9.10-1.1 on GA media</p> <p>strongswan-5.9.10-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:12749-1 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0569 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in strongSwan ausnutzen, um einen Denial of Service zu verursachen und beliebigen Programmcode auszuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in strongSwan ausnutzen, um einen Denial of Service zu verursachen und beliebigen Programmcode auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0569