{"id":"CVE-2021-41990","aliases":["ALPINE-CVE-2021-41990","AZL-6896","DEBIAN-CVE-2021-41990","DSA-4989-1","EUVD-2021-28980","GHSA-3wp5-cvp4-5h42","OESA-2021-1408","SUSE-SU-2021:3467-1","SUSE-SU-2021:3469-1","UBUNTU-CVE-2021-41990","USN-5111-1","openSUSE-SU-2021:1399-1","openSUSE-SU-2021:3467-1","openSUSE-SU-2024:11655-1"],"status":"published","title":"The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate...","description":"The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate with an RSASSA-PSS signature. For example, this can be triggered by an unrelated self-signed CA certificate sent by an initiator. Remote code execution cannot occur.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.06915,"percentile":0.94137,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-190"],"published":"2021-10-18T00:00:00Z","modified":"2026-10-23T18:02:30Z","fixes":[{"ecosystem":"Alpine:v3.12","package":"strongswan","fixed_in":["5.8.4-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"strongswan","fixed_in":["5.9.1-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"strongswan","fixed_in":["5.9.1-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"strongswan","fixed_in":["5.9.1-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"strongswan","fixed_in":["5.9.1-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"strongswan","fixed_in":["5.9.1-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"strongswan","fixed_in":["5.9.1-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"strongswan","fixed_in":["5.9.1-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"strongswan","fixed_in":["5.9.1-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"strongswan","fixed_in":["5.9.1-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"strongswan","fixed_in":["5.9.1-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"strongswan","fixed_in":["5.9.1-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"strongswan","fixed_in":["5.9.1-r3"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"strongswan","fixed_in":["5.9.5-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"strongswan","fixed_in":["5.9.4-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"strongswan","fixed_in":["5.9.4-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"strongswan","fixed_in":["5.9.4-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"strongswan","fixed_in":["5.6.2-1ubuntu2.7"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:FIPS-updates:18.04:LTS","package":"strongswan","fixed_in":["5.6.2-1ubuntu2.fips.2.7.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"strongswan","fixed_in":["5.8.2-1ubuntu3.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:FIPS-updates:20.04:LTS","package":"strongswan","fixed_in":["5.8.2-1ubuntu3.fips.3.3.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"strongswan","fixed_in":["5.9.1-1ubuntu3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.12","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.6.1"},{"fixed":"5.8.4-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.6.1"},{"fixed":"5.9.1-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.6.1"},{"fixed":"5.9.1-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.6.1"},{"fixed":"5.9.1-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.6.1"},{"fixed":"5.9.1-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.6.1"},{"fixed":"5.9.1-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.6.1"},{"fixed":"5.9.1-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.6.1"},{"fixed":"5.9.1-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.6.1"},{"fixed":"5.9.1-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.6.1"},{"fixed":"5.9.1-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.6.1"},{"fixed":"5.9.1-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.6.1"},{"fixed":"5.9.1-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.6.1"},{"fixed":"5.9.1-r3"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.5-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.4-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.4-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.4-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7.2-1+deb10u1"}]}],"versions":["5.7.2-1"],"bundled":2},{"source":"osv","ecosystem":"Debian:11","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.1-1+deb11u1"}]}],"versions":["5.9.1-1"],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7.2-7.oe1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP2","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7.2-7.oe1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-11.21.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-11.21.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP2","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-11.21.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP3","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-11.21.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP2","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-11.21.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP3","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-11.21.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-4.14.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-4.14.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-4.14.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-4.14.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-4.14.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-4.14.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-4.14.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-4.14.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-4.14.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-4.14.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.2-1ubuntu2.7"}]}],"versions":["5.5.1-4ubuntu2","5.5.1-4ubuntu3","5.6.1-2ubuntu1","5.6.1-2ubuntu2","5.6.1-2ubuntu3","5.6.1-2ubuntu4","5.6.2-1ubuntu2","5.6.2-1ubuntu2.2","5.6.2-1ubuntu2.3","5.6.2-1ubuntu2.4","5.6.2-1ubuntu2.5","5.6.2-1ubuntu2.6"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:18.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.2-1ubuntu2.fips.2.7.1"}]}],"versions":["5.6.2-1ubuntu2.fips.2.5.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS:18.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.6.2-1ubuntu2.fips.2.4.2","5.6.2-1ubuntu2.fips.2.5.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-1ubuntu3.3"}]}],"versions":["5.7.2-1ubuntu3","5.8.1-1ubuntu1","5.8.2-1ubuntu1","5.8.2-1ubuntu2","5.8.2-1ubuntu3","5.8.2-1ubuntu3.1","5.8.2-1ubuntu3.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:20.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-1ubuntu3.fips.3.3.1"}]}],"versions":["5.8.2-1ubuntu3.fips.3.1.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS:20.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.2-1ubuntu3.fips.3.1.2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.1-1ubuntu3.1"}]}],"versions":["5.9.1-1ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.2-1ubuntu2.7"}]}],"versions":["5.5.1-4ubuntu2","5.5.1-4ubuntu3","5.6.1-2ubuntu1","5.6.1-2ubuntu2","5.6.1-2ubuntu3","5.6.1-2ubuntu4","5.6.2-1ubuntu2","5.6.2-1ubuntu2.2","5.6.2-1ubuntu2.3","5.6.2-1ubuntu2.4","5.6.2-1ubuntu2.5","5.6.2-1ubuntu2.6"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-1ubuntu3.3"}]}],"versions":["5.7.2-1ubuntu3","5.8.1-1ubuntu1","5.8.2-1ubuntu1","5.8.2-1ubuntu2","5.8.2-1ubuntu3","5.8.2-1ubuntu3.1","5.8.2-1ubuntu3.2"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-lp152.2.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-11.21.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.4-1.1"}]}],"bundled":2}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"siemens","product":"6gk5615-0aa00-2aa2_firmware"},{"vendor":"siemens","product":"6gk5804-0ap00-2aa2_firmware"},{"vendor":"siemens","product":"6gk5812-1aa00-2aa2_firmware"},{"vendor":"siemens","product":"6gk5812-1ba00-2aa2_firmware"},{"vendor":"siemens","product":"6gk5816-1aa00-2aa2_firmware"},{"vendor":"siemens","product":"6gk5816-1ba00-2aa2_firmware"},{"vendor":"siemens","product":"6gk5826-2ab00-2ab2_firmware"},{"vendor":"siemens","product":"6gk5856-2ea00-3aa1_firmware"},{"vendor":"siemens","product":"6gk5856-2ea00-3da1_firmware"},{"vendor":"siemens","product":"6gk5874-2aa00-2aa2_firmware"},{"vendor":"siemens","product":"6gk5874-3aa00-2aa2_firmware"},{"vendor":"siemens","product":"6gk5876-3aa02-2ba2_firmware"},{"vendor":"siemens","product":"6gk5876-3aa02-2ea2_firmware"},{"vendor":"siemens","product":"6gk5876-4aa00-2ba2_firmware"},{"vendor":"siemens","product":"6gk5876-4aa00-2da2_firmware"},{"vendor":"siemens","product":"6gk6108-4am00-2ba2_firmware"},{"vendor":"siemens","product":"6gk6108-4am00-2da2_firmware"},{"vendor":"strongswan","product":"strongswan"}],"references":[{"url":"https://github.com/strongswan/strongswan/releases/tag/5.9.4","tags":["x_refsource_MISC","x_transferred","Release Notes","Third Party Advisory","advisory"]},{"url":"https://www.strongswan.org/blog/2021/10/18/strongswan-vulnerability-%28cve-2021-41990%29.html","tags":["x_refsource_CONFIRM","x_transferred","article"]},{"url":"https://www.debian.org/security/2021/dsa-4989","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5FJSATD2R2XHTG4P63GCMQ2N7EWKMME5/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WQSQ3BEC22NF4NCDZVCT4P3Q2ZIAJXGJ/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3TQ32JLJOBJDB2EJKSX2PBPB5NFG2D4/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-539476.pdf","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41990","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5FJSATD2R2XHTG4P63GCMQ2N7EWKMME5/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQSQ3BEC22NF4NCDZVCT4P3Q2ZIAJXGJ/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Y3TQ32JLJOBJDB2EJKSX2PBPB5NFG2D4/"},{"url":"https://www.strongswan.org/blog/2021/10/18/strongswan-vulnerability-(cve-2021-41990).html"},{"url":"https://github.com/advisories/GHSA-3wp5-cvp4-5h42"},{"url":"https://security.alpinelinux.org/vuln/CVE-2021-41990","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-41990","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1408","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41991","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20213467-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1191367","tags":["report"]},{"url":"https://bugzilla.suse.com/1191435","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-41990","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-41991","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20213469-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1167880","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-41990","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5111-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-41990","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-41991","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EFL7BNFHRF7ZQZFGAWEPQ7ZQHD6T6CNA/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NOTT66WWQ6OSMGWC35UZKJSSHCUIWURT/","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2021-41990","description":"The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate with an RSASSA-PSS signature. For example, this can be triggered by an unrelated self-signed CA certificate sent by an initiator. Remote code execution cannot occur.","status":"published","published":"2021-10-18T13:44:50Z","modified":"2024-08-04T03:22:25.777Z","updated_at":"2026-11-02T14:32:59.105382Z"}],"euvd":[{"id":"EUVD-2021-28980","description":"The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate with an RSASSA-PSS signature. For example, this can be triggered by an unrelated self-signed CA certificate sent by an initiator. Remote code execution cannot occur.","status":"published","published":"2021-10-18T13:44:50Z","modified":"2024-08-04T03:22:25Z","updated_at":"2026-11-03T03:24:16.784119Z"}],"ghsa":[{"id":"GHSA-3wp5-cvp4-5h42","title":"The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate...","description":"The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate with an RSASSA-PSS signature. For example, this can be triggered by an unrelated self-signed CA certificate sent by an initiator. Remote code execution cannot occur.","status":"published","published":"2022-05-24T19:17:46Z","modified":"2023-01-30T05:02:52Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:46:43.616467Z"}],"nvd":[{"id":"CVE-2021-41990","description":"The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate with an RSASSA-PSS signature. For example, this can be triggered by an unrelated self-signed CA certificate sent by an initiator. Remote code execution cannot occur.","status":"published","published":"2021-10-18T14:15:10.297Z","modified":"2026-06-17T04:09:07.3Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:06:59.689345Z"}],"osv":[{"id":"ALPINE-CVE-2021-41990","description":"The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate with an RSASSA-PSS signature. For example, this can be triggered by an unrelated self-signed CA certificate sent by an initiator. Remote code execution cannot occur.","status":"published","published":"2021-10-18T14:15:10.297Z","modified":"2026-10-23T17:17:56.217179197Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:48.646074Z"},{"id":"AZL-6896","title":"CVE-2021-41990 affecting package strongswan for versions less than 5.9.5-1","description":"The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate with an RSASSA-PSS signature. For example, this can be triggered by an unrelated self-signed CA certificate sent by an initiator. Remote code execution cannot occur.","status":"published","published":"2021-10-18T14:15:10Z","modified":"2026-04-21T04:38:32.036482Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:08.630357Z"},{"id":"CVE-2021-41990","description":"The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate with an RSASSA-PSS signature. For example, this can be triggered by an unrelated self-signed CA certificate sent by an initiator. Remote code execution cannot occur.","status":"published","published":"2021-10-18T14:15:10.297Z","modified":"2026-10-20T10:54:59.59144198Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:21.557945Z"},{"id":"DEBIAN-CVE-2021-41990","description":"The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate with an RSASSA-PSS signature. For example, this can be triggered by an unrelated self-signed CA certificate sent by an initiator. Remote code execution cannot occur.","status":"published","published":"2021-10-18T14:15:10.297Z","modified":"2026-10-23T18:02:30.282417949Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:35.799676Z"},{"id":"OESA-2021-1408","title":"strongswan security update","description":"The strongSwan IPsec implementation supports both the IKEv1 and IKEv2 key exchange protocols in conjunction with the native NETKEY IPsec stack of the Linux kernel.\r\n\r\nSecurity Fix(es):\r\n\r\nThe gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate with an RSASSA-PSS signature. For example, this can be triggered by an unrelated self-signed CA certificate sent by an initiator. Remote code execution cannot occur.(CVE-2021-41990)\r\n\r\nThe in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests with different certificates to fill the cache and later trigger the replacement of cache entries. The code attempts to select a less-often-used cache entry by means of a random number generator, but this is not done correctly. Remote code execution might be a slight possibility.(CVE-2021-41991)","status":"published","published":"2021-10-30T11:04:40Z","modified":"2026-08-18T01:16:06.525907853Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:38.987987Z"},{"id":"UBUNTU-CVE-2021-41990","description":"The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate with an RSASSA-PSS signature. For example, this can be triggered by an unrelated self-signed CA certificate sent by an initiator. Remote code execution cannot occur.","status":"published","published":"2021-10-18T12:00:00Z","modified":"2026-02-04T04:07:50.399315Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:29.220315Z"},{"id":"DSA-4989-1","title":"strongswan - security update","status":"published","published":"2021-10-18T00:00:00Z","modified":"2026-03-09T02:10:37.923318Z","updated_at":"2026-11-02T15:46:17.19998Z"},{"id":"openSUSE-SU-2021:1399-1","title":"Security update for strongswan","description":"This update for strongswan fixes the following issues:\n\nA feature was added:\n\n- Add auth_els plugin to support Marvell FC-SP encryption (jsc#SLE-20151)\n\nSecurity issues fixed:\n\n- CVE-2021-41991: Fixed an integer overflow when replacing certificates in cache. (bsc#1191435)\n- CVE-2021-41990: Fixed an integer Overflow in the gmp Plugin. (bsc#1191367)\n\n\nThis update was imported from the SUSE:SLE-15-SP2:Update update project.","status":"published","published":"2021-10-31T14:52:34Z","modified":"2026-02-04T04:20:44.765001Z","updated_at":"2026-11-02T16:58:32.266854Z"},{"id":"openSUSE-SU-2021:3467-1","title":"Security update for strongswan","description":"This update for strongswan fixes the following issues:\n\nA feature was added:\n\n- Add auth_els plugin to support Marvell FC-SP encryption (jsc#SLE-20151)\n\nSecurity issues fixed:\n\n- CVE-2021-41991: Fixed an integer overflow when replacing certificates in cache. (bsc#1191435)\n- CVE-2021-41990: Fixed an integer Overflow in the gmp Plugin. (bsc#1191367)\n\n","status":"published","published":"2021-10-19T11:16:45Z","modified":"2026-02-04T03:54:58.746322Z","updated_at":"2026-11-02T16:58:32.266854Z"},{"id":"openSUSE-SU-2024:11655-1","title":"strongswan-5.9.4-1.1 on GA media","description":"These are all security issues fixed in the strongswan-5.9.4-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:10:19.233327Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"SUSE-SU-2021:3467-1","title":"Security update for strongswan","description":"This update for strongswan fixes the following issues:\n\nA feature was added:\n\n- Add auth_els plugin to support Marvell FC-SP encryption (jsc#SLE-20151)\n\nSecurity issues fixed:\n\n- CVE-2021-41991: Fixed an integer overflow when replacing certificates in cache. (bsc#1191435)\n- CVE-2021-41990: Fixed an integer Overflow in the gmp Plugin. (bsc#1191367)\n\n","status":"published","published":"2021-10-19T11:16:44Z","modified":"2026-02-04T03:50:26.172354Z","updated_at":"2026-11-02T15:53:49.605187Z"},{"id":"SUSE-SU-2021:3469-1","title":"Security update for strongswan","description":"This update for strongswan fixes the following issues:\n\n- Fix trailing quotation mark missing from example in README. (bsc#1167880)\n- CVE-2021-41991: Fixed an integer overflow when replacing certificates in cache. (bsc#1191435)\n- CVE-2021-41990: Fixed an integer Overflow in the gmp Plugin. (bsc#1191367)\n","status":"published","published":"2021-10-19T13:45:21Z","modified":"2026-02-04T02:23:07.661517Z","updated_at":"2026-11-02T15:53:49.605187Z"},{"id":"USN-5111-1","title":"strongswan vulnerabilities","description":"It was discovered that strongSwan incorrectly handled certain RSASSA-PSS\nsignatures. A remote attacker could use this issue to cause strongSwan to\ncrash, resulting in a denial of service. (CVE-2021-41990)\n\nIt was discovered that strongSwan incorrectly handled replacing\ncertificates in the cache. A remote attacker could use this issue to cause\nstrongSwan to crash, resulting in a denial of service, or possibly execute\narbitrary code. (CVE-2021-41991)\n","status":"published","published":"2021-10-19T10:54:55Z","modified":"2026-04-27T15:57:38.055784Z","updated_at":"2026-11-02T16:58:15.683829Z"}]}}