https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 02:19:48 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-02400 bdu:2026-02400 https://cve.radiocsirt.org/vuln/bdu:2026-02400 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0931 certfr-2025-avi-0931 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0931 https://cve.radiocsirt.org/vuln/euvd-2026-265962 EUVD-2026-265962 https://cve.radiocsirt.org/vuln/euvd-2026-265962 https://cve.radiocsirt.org/vuln/fkie_cve-2025-62291 <p>In the eap-mschapv2 plugin (client-side) in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted message of size 6 through 8, and cause an integer underflow that potentially results in a heap-based buffer overflow.</p> <p>In the eap-mschapv2 plugin (client-side) in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted message of size 6 through 8, and cause an integer underflow that potentially results in a heap-based buffer overflow.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-62291 https://cve.radiocsirt.org/vuln/ghsa-p527-wjvq-vxg8 <p>In the eap-mschapv2 plugin (client-side) in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted message of size 6 through 8, and cause an integer underflow that potentially results in a heap-based buffer overflow.</p> <p>In the eap-mschapv2 plugin (client-side) in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted message of size 6 through 8, and cause an integer underflow that potentially results in a heap-based buffer overflow.</p> https://cve.radiocsirt.org/vuln/ghsa-p527-wjvq-vxg8 https://cve.radiocsirt.org/vuln/msrc_cve-2025-62291 msrc_CVE-2025-62291 https://cve.radiocsirt.org/vuln/msrc_cve-2025-62291 https://cve.radiocsirt.org/vuln/oesa-2026-4070 <p><strong>Affected:</strong> openEuler:22.03-LTS-SP4: strongswan</p> <p>The strongSwan IPsec implementation supports both the IKEv1 and IKEv2 key exchange protocols in conjunction with the native NETKEY IPsec stack of the Linux kernel. Security Fix(es):</p> <p>In the eap-mschapv2 plugin (client-side) in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted message of size 6 through 8, and cause an integer underflow that potentially results in a heap-based buffer overflow.(CVE-2025-62291)</p> <p><strong>Affected:</strong> openEuler:22.03-LTS-SP4: strongswan</p> <p>The strongSwan IPsec implementation supports both the IKEv1 and IKEv2 key exchange protocols in conjunction with the native NETKEY IPsec stack of the Linux kernel. Security Fix(es):</p> <p>In the eap-mschapv2 plugin (client-side) in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted message of size 6 through 8, and cause an integer underflow that potentially results in a heap-based buffer overflow.(CVE-2025-62291)</p> https://cve.radiocsirt.org/vuln/oesa-2026-4070 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15681-1 <p>strongswan-6.0.3-1.1 on GA media</p> <p>strongswan-6.0.3-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:15681-1 https://cve.radiocsirt.org/vuln/suse-su-2025:21167-1 <p>Security update for strongswan</p> <p>Security update for strongswan</p> https://cve.radiocsirt.org/vuln/suse-su-2025:21167-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-62291 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: strongswan, Ubuntu:Pro:16.04:LTS: strongswan, Ubuntu:Pro:FIPS-updates:16.04:LTS: strongswan, Ubuntu:Pro:FIPS:16.04:LTS: strongswan, Ubuntu:Pro:18.04:LTS: strongswan, Ubuntu:Pro:FIPS-updates:18.04:LTS: strongswan, Ubuntu:Pro:FIPS:18.04:LTS: strongswan, Ubuntu:20.04:LTS: strongswan, Ubuntu:Pro:FIPS-updates:20.04:LTS: strongswan, Ubuntu:Pro:FIPS:20.04:LTS: strongswan and 6 more</p> <p>In the eap-mschapv2 plugin (client-side) in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted message of size 6 through 8, and cause an integer underflow that potentially results in a heap-based buffer overflow.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: strongswan, Ubuntu:Pro:16.04:LTS: strongswan, Ubuntu:Pro:FIPS-updates:16.04:LTS: strongswan, Ubuntu:Pro:FIPS:16.04:LTS: strongswan, Ubuntu:Pro:18.04:LTS: strongswan, Ubuntu:Pro:FIPS-updates:18.04:LTS: strongswan, Ubuntu:Pro:FIPS:18.04:LTS: strongswan, Ubuntu:20.04:LTS: strongswan, Ubuntu:Pro:FIPS-updates:20.04:LTS: strongswan, Ubuntu:Pro:FIPS:20.04:LTS: strongswan and 6 more</p> <p>In the eap-mschapv2 plugin (client-side) in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted message of size 6 through 8, and cause an integer underflow that potentially results in a heap-based buffer overflow.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-62291 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2427 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in strongSwan ausnutzen, um einen Denial-of-Service-Zustand zu verursachen oder möglicherweise beliebigen Code auszuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in strongSwan ausnutzen, um einen Denial-of-Service-Zustand zu verursachen oder möglicherweise beliebigen Code auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2427