CVE-2010-2628
The IKE daemon in strongSwan 4.3.x before 4.3.7 and 4.4.x before 4.4.1 does not properly check...
The IKE daemon in strongSwan 4.3.x before 4.3.7 and 4.4.x before 4.4.1 does not properly check the return values of snprintf calls, which allows remote attackers to execute arbitrary code via crafted (1) certificate or (2) identity data that triggers buffer overflows.
Exploit likelihood
What each source reports
NVD Score used
The IKE daemon in strongSwan 4.3.x before 4.3.7 and 4.4.x before 4.4.1 does not properly check the return values of snprintf calls, which allows remote attackers to execute arbitrary code via crafted (1) certificate or (2) identity data that triggers buffer overflows.
- Record
CVE-2010-2628- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-94
- Updated
- 2026-11-02
CVE List No score
The IKE daemon in strongSwan 4.3.x before 4.3.7 and 4.4.x before 4.4.1 does not properly check the return values of snprintf calls, which allows remote attackers to execute arbitrary code via crafted (1) certificate or (2) identity data that triggers buffer overflows.
- Record
CVE-2010-2628- Updated
- 2026-11-02
EUVDEUVD-2010-2632 No score
The IKE daemon in strongSwan 4.3.x before 4.3.7 and 4.4.x before 4.4.1 does not properly check the return values of snprintf calls, which allows remote attackers to execute arbitrary code via crafted (1) certificate or (2) identity data that triggers buffer overflows.
- Record
EUVD-2010-2632- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5ccj-qrf4-3667 No score
The IKE daemon in strongSwan 4.3.x before 4.3.7 and 4.4.x before 4.4.1 does not properly check...
The IKE daemon in strongSwan 4.3.x before 4.3.7 and 4.4.x before 4.4.1 does not properly check the return values of snprintf calls, which allows remote attackers to execute arbitrary code via crafted (1) certificate or (2) identity data that triggers buffer overflows.
- Record
GHSA-5ccj-qrf4-3667- Weakness
- CWE-94
- Updated
- 2026-11-02
OSV No score
The IKE daemon in strongSwan 4.3.x before 4.3.7 and 4.4.x before 4.4.1 does not properly check the return values of snprintf calls, which allows remote attackers to execute arbitrary code via crafted (1) certificate or (2) identity data that triggers buffer overflows.
- Record
CVE-2010-2628- Updated
- 2026-11-02
OSVDEBIAN-CVE-2010-2628 No score
The IKE daemon in strongSwan 4.3.x before 4.3.7 and 4.4.x before 4.4.1 does not properly check the return values of snprintf calls, which allows remote attackers to execute arbitrary code via crafted (1) certificate or (2) identity data that triggers buffer overflows.
- Record
DEBIAN-CVE-2010-2628- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
strongswanDebian:12 |
before 4.4.1-1 | 4.4.1-1 |
strongswanDebian:13 |
before 4.4.1-1 | 4.4.1-1 |
strongswanDebian:14 |
before 4.4.1-1 | 4.4.1-1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-2628 is a high vulnerability (CVSS 7.5) in Strongswan, published August 20, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.05%, the 90th percentile. Fixed in strongswan 4.4.1-1.
References
vupen.com/english/advisories/2010/2086
lists.opensuse.org/opensuse-updates/2010-08/msg00026.html
lists.strongswan.org/pipermail/users/2010-August/005167.html
download.strongswan.org/patches/08_snprintf_patch/strongswan-4.3.4_snprintf.patch
securitytracker.com/id?1024338
Show 11 moreShow less
secunia.com/advisories/40956
securityfocus.com/bid/42444
bugzilla.novell.com/615915
trac.strongswan.org/projects/strongswan/wiki/441
nvd.nist.gov/vuln/detail/CVE-2010-2628
github.com/advisories/GHSA-5ccj-qrf4-3667
security-tracker.debian.org/tracker/CVE-2010-2628