{"id":"CVE-2021-41991","aliases":["ALPINE-CVE-2021-41991","AZL-6897","DEBIAN-CVE-2021-41991","DLA-2788-1","DSA-4989-1","EUVD-2021-28981","GHSA-jpr7-w98h-cvgm","OESA-2021-1408","SUSE-SU-2021:14827-1","SUSE-SU-2021:3467-1","SUSE-SU-2021:3468-1","SUSE-SU-2021:3469-1","UBUNTU-CVE-2021-41991","USN-5111-1","USN-5111-2","openSUSE-SU-2021:1399-1","openSUSE-SU-2021:3467-1","openSUSE-SU-2024:11655-1"],"status":"published","title":"The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon...","description":"The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests with different certificates to fill the cache and later trigger the replacement of cache entries. The code attempts to select a less-often-used cache entry by means of a random number generator, but this is not done correctly. Remote code execution might be a slight possibility.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.05301,"percentile":0.92697,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-190"],"published":"2021-10-18T00:00:00Z","modified":"2026-10-23T18:04:15Z","fixes":[{"ecosystem":"Alpine:v3.12","package":"strongswan","fixed_in":["5.8.4-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"strongswan","fixed_in":["5.9.1-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"strongswan","fixed_in":["5.9.1-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"strongswan","fixed_in":["5.9.1-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"strongswan","fixed_in":["5.9.1-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"strongswan","fixed_in":["5.9.1-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"strongswan","fixed_in":["5.9.1-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"strongswan","fixed_in":["5.9.1-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"strongswan","fixed_in":["5.9.1-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"strongswan","fixed_in":["5.9.1-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"strongswan","fixed_in":["5.9.1-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"strongswan","fixed_in":["5.9.1-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"strongswan","fixed_in":["5.9.1-r3"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"strongswan","fixed_in":["5.9.5-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"strongswan","fixed_in":["5.9.4-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"strongswan","fixed_in":["5.9.4-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"strongswan","fixed_in":["5.9.4-1"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"strongswan","fixed_in":["5.5.1-4+deb9u5"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"strongswan","fixed_in":["4.4.0-6.36.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"strongswan","fixed_in":["4.4.0-6.36.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"strongswan","fixed_in":["5.1.3-26.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"strongswan","fixed_in":["5.1.3-26.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 9","package":"strongswan","fixed_in":["5.1.3-26.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"strongswan","fixed_in":["5.1.3-26.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"strongswan","fixed_in":["5.1.3-26.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"strongswan","fixed_in":["5.1.3-26.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"strongswan","fixed_in":["5.1.3-26.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"strongswan","fixed_in":["5.1.3-26.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"strongswan","fixed_in":["5.1.3-26.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"strongswan","fixed_in":["5.1.3-26.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"strongswan","fixed_in":["5.1.3-26.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"strongswan","fixed_in":["5.1.3-26.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"strongswan","fixed_in":["5.1.3-26.16.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"strongswan","fixed_in":["5.1.2-0ubuntu2.11+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"strongswan","fixed_in":["5.3.5-1ubuntu3.8+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:FIPS-updates:16.04:LTS","package":"strongswan","fixed_in":["5.3.5-1ubuntu3.fips.3.8.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"strongswan","fixed_in":["5.6.2-1ubuntu2.7"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:FIPS-updates:18.04:LTS","package":"strongswan","fixed_in":["5.6.2-1ubuntu2.fips.2.7.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"strongswan","fixed_in":["5.8.2-1ubuntu3.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:FIPS-updates:20.04:LTS","package":"strongswan","fixed_in":["5.8.2-1ubuntu3.fips.3.3.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"strongswan","fixed_in":["5.9.1-1ubuntu3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.12","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.2.10"},{"fixed":"5.8.4-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.2.10"},{"fixed":"5.9.1-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.2.10"},{"fixed":"5.9.1-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.2.10"},{"fixed":"5.9.1-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.2.10"},{"fixed":"5.9.1-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.2.10"},{"fixed":"5.9.1-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.2.10"},{"fixed":"5.9.1-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.2.10"},{"fixed":"5.9.1-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.2.10"},{"fixed":"5.9.1-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.2.10"},{"fixed":"5.9.1-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.2.10"},{"fixed":"5.9.1-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.2.10"},{"fixed":"5.9.1-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.2.10"},{"fixed":"5.9.1-r3"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.5-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.4-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.4-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.4-1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.1-4+deb9u5"}]}],"versions":["5.5.1-4","5.5.1-4+deb9u1","5.5.1-4+deb9u2","5.5.1-4+deb9u3","5.5.1-4+deb9u4"]},{"source":"osv","ecosystem":"Debian:10","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7.2-1+deb10u1"}]}],"versions":["5.7.2-1"],"bundled":2},{"source":"osv","ecosystem":"Debian:11","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.1-1+deb11u1"}]}],"versions":["5.9.1-1"],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7.2-7.oe1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP2","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7.2-7.oe1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-6.36.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-6.36.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-11.21.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-11.21.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP2","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-11.21.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP3","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-11.21.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP2","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-11.21.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP3","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-11.21.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.3-26.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.3-26.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.3-26.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.3-26.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.3-26.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.3-26.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.3-26.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.3-26.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.3-26.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.3-26.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.3-26.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.3-26.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.3-26.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-4.14.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-4.14.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-4.14.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-4.14.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-4.14.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-4.14.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-4.14.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-4.14.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-4.14.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-4.14.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.2-0ubuntu2.11+esm1"}]}],"versions":["4.6.4-9","5.1.0-2","5.1.0-3","5.1.1-0ubuntu1","5.1.1-0ubuntu2","5.1.1-0ubuntu3","5.1.1-0ubuntu4","5.1.1-0ubuntu5","5.1.1-0ubuntu7","5.1.1-0ubuntu14","5.1.1-0ubuntu17","5.1.2~dr3+git20130120-0ubuntu2","5.1.2~dr3+git20130120-0ubuntu3","5.1.2~rc1-0ubuntu3","5.1.2~rc1-0ubuntu4","5.1.2~rc2-0ubuntu2","5.1.2-0ubuntu1","5.1.2-0ubuntu2","5.1.2-0ubuntu2.2","5.1.2-0ubuntu2.3","5.1.2-0ubuntu2.4","5.1.2-0ubuntu2.5","5.1.2-0ubuntu2.6","5.1.2-0ubuntu2.7","5.1.2-0ubuntu2.8","5.1.2-0ubuntu2.10","5.1.2-0ubuntu2.11"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.5-1ubuntu3.8+esm1"}]}],"versions":["5.1.2-0ubuntu6","5.1.2-0ubuntu7","5.1.2-0ubuntu8","5.3.5-1ubuntu1","5.3.5-1ubuntu2","5.3.5-1ubuntu3","5.3.5-1ubuntu3.1","5.3.5-1ubuntu3.2","5.3.5-1ubuntu3.3","5.3.5-1ubuntu3.4","5.3.5-1ubuntu3.5","5.3.5-1ubuntu3.7","5.3.5-1ubuntu3.8"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:16.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.5-1ubuntu3.fips.3.8.2"}]}],"versions":["5.3.5-1ubuntu3.fips.3.4.1","5.3.5-1ubuntu3.fips.3.4.2","5.3.5-1ubuntu3.fips.3.8.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS:16.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.5-1ubuntu3.fips.3.1","5.3.5-1ubuntu3.fips.3.2","5.3.5-1ubuntu3.fips.3.3"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.2-1ubuntu2.7"}]}],"versions":["5.5.1-4ubuntu2","5.5.1-4ubuntu3","5.6.1-2ubuntu1","5.6.1-2ubuntu2","5.6.1-2ubuntu3","5.6.1-2ubuntu4","5.6.2-1ubuntu2","5.6.2-1ubuntu2.2","5.6.2-1ubuntu2.3","5.6.2-1ubuntu2.4","5.6.2-1ubuntu2.5","5.6.2-1ubuntu2.6"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:18.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.2-1ubuntu2.fips.2.7.1"}]}],"versions":["5.6.2-1ubuntu2.fips.2.5.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS:18.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.6.2-1ubuntu2.fips.2.4.2","5.6.2-1ubuntu2.fips.2.5.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-1ubuntu3.3"}]}],"versions":["5.7.2-1ubuntu3","5.8.1-1ubuntu1","5.8.2-1ubuntu1","5.8.2-1ubuntu2","5.8.2-1ubuntu3","5.8.2-1ubuntu3.1","5.8.2-1ubuntu3.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:20.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-1ubuntu3.fips.3.3.1"}]}],"versions":["5.8.2-1ubuntu3.fips.3.1.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS:20.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.2-1ubuntu3.fips.3.1.2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.1-1ubuntu3.1"}]}],"versions":["5.9.1-1ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.2-1ubuntu2.7"}]}],"versions":["5.5.1-4ubuntu2","5.5.1-4ubuntu3","5.6.1-2ubuntu1","5.6.1-2ubuntu2","5.6.1-2ubuntu3","5.6.1-2ubuntu4","5.6.2-1ubuntu2","5.6.2-1ubuntu2.2","5.6.2-1ubuntu2.3","5.6.2-1ubuntu2.4","5.6.2-1ubuntu2.5","5.6.2-1ubuntu2.6"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-1ubuntu3.3"}]}],"versions":["5.7.2-1ubuntu3","5.8.1-1ubuntu1","5.8.2-1ubuntu1","5.8.2-1ubuntu2","5.8.2-1ubuntu3","5.8.2-1ubuntu3.1","5.8.2-1ubuntu3.2"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.2-0ubuntu2.11+esm1"}]}],"versions":["4.6.4-9","5.1.0-2","5.1.0-3","5.1.1-0ubuntu1","5.1.1-0ubuntu2","5.1.1-0ubuntu3","5.1.1-0ubuntu4","5.1.1-0ubuntu5","5.1.1-0ubuntu7","5.1.1-0ubuntu14","5.1.1-0ubuntu17","5.1.2~dr3+git20130120-0ubuntu2","5.1.2~dr3+git20130120-0ubuntu3","5.1.2~rc1-0ubuntu3","5.1.2~rc1-0ubuntu4","5.1.2~rc2-0ubuntu2","5.1.2-0ubuntu1","5.1.2-0ubuntu2","5.1.2-0ubuntu2.2","5.1.2-0ubuntu2.3","5.1.2-0ubuntu2.4","5.1.2-0ubuntu2.5","5.1.2-0ubuntu2.6","5.1.2-0ubuntu2.7","5.1.2-0ubuntu2.8","5.1.2-0ubuntu2.10","5.1.2-0ubuntu2.11"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.5-1ubuntu3.8+esm1"}]}],"versions":["5.1.2-0ubuntu6","5.1.2-0ubuntu7","5.1.2-0ubuntu8","5.3.5-1ubuntu1","5.3.5-1ubuntu2","5.3.5-1ubuntu3","5.3.5-1ubuntu3.1","5.3.5-1ubuntu3.2","5.3.5-1ubuntu3.3","5.3.5-1ubuntu3.4","5.3.5-1ubuntu3.5","5.3.5-1ubuntu3.7","5.3.5-1ubuntu3.8"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-lp152.2.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-11.21.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.4-1.1"}]}],"bundled":2}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"siemens","product":"cp_1543-1_firmware"},{"vendor":"siemens","product":"scalance_sc622-2c_firmware"},{"vendor":"siemens","product":"scalance_sc632-2c_firmware"},{"vendor":"siemens","product":"scalance_sc636-2c_firmware"},{"vendor":"siemens","product":"scalance_sc642-2c_firmware"},{"vendor":"siemens","product":"scalance_sc646-2c_firmware"},{"vendor":"siemens","product":"simatic_cp_1242-7_gprs_v2_firmware"},{"vendor":"siemens","product":"simatic_cp_1243-1_firmware"},{"vendor":"siemens","product":"simatic_cp_1243-7_lte\\/us_firmware"},{"vendor":"siemens","product":"simatic_cp_1542sp-1_firmware"},{"vendor":"siemens","product":"simatic_cp_1542sp-1_irc_firmware"},{"vendor":"siemens","product":"simatic_cp_1543sp-1_firmware"},{"vendor":"siemens","product":"simatic_net_cp1243-7_lte_eu_firmware"},{"vendor":"siemens","product":"simatic_net_cp_1243-8_irc_firmware"},{"vendor":"siemens","product":"simatic_net_cp_1545-1_firmware"},{"vendor":"siemens","product":"sinema_remote_connect_server"},{"vendor":"siemens","product":"siplus_et_200sp_cp_1542sp-1_irc_tx_rail_firmware"},{"vendor":"siemens","product":"siplus_et_200sp_cp_1543sp-1_isec_firmware"},{"vendor":"siemens","product":"siplus_et_200sp_cp_1543sp-1_isec_tx_rail_firmware"},{"vendor":"siemens","product":"siplus_net_cp_1543-1_firmware"},{"vendor":"siemens","product":"siplus_s7-1200_cp_1243-1_firmware"},{"vendor":"siemens","product":"siplus_s7-1200_cp_1243-1_rail_firmware"},{"vendor":"strongswan","product":"strongswan"}],"references":[{"url":"https://github.com/strongswan/strongswan/releases/tag/5.9.4","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.strongswan.org/blog/2021/10/18/strongswan-vulnerability-%28cve-2021-41991%29.html","tags":["x_refsource_CONFIRM","x_transferred","article"]},{"url":"https://www.debian.org/security/2021/dsa-4989","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/10/msg00014.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5FJSATD2R2XHTG4P63GCMQ2N7EWKMME5/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WQSQ3BEC22NF4NCDZVCT4P3Q2ZIAJXGJ/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3TQ32JLJOBJDB2EJKSX2PBPB5NFG2D4/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-539476.pdf","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41991","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5FJSATD2R2XHTG4P63GCMQ2N7EWKMME5/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQSQ3BEC22NF4NCDZVCT4P3Q2ZIAJXGJ/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Y3TQ32JLJOBJDB2EJKSX2PBPB5NFG2D4/"},{"url":"https://www.strongswan.org/blog/2021/10/18/strongswan-vulnerability-(cve-2021-41991).html"},{"url":"https://github.com/advisories/GHSA-jpr7-w98h-cvgm"},{"url":"https://security.alpinelinux.org/vuln/CVE-2021-41991","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-41991","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1408","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41990","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-202114827-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1191435","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-41991","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20213467-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1191367","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-41990","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20213468-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20213469-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1167880","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-41991","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5111-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5111-2","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-41991","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-41990","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EFL7BNFHRF7ZQZFGAWEPQ7ZQHD6T6CNA/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NOTT66WWQ6OSMGWC35UZKJSSHCUIWURT/","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2021-41991","description":"The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests with different certificates to fill the cache and later trigger the replacement of cache entries. The code attempts to select a less-often-used cache entry by means of a random number generator, but this is not done correctly. Remote code execution might be a slight possibility.","status":"published","published":"2021-10-18T13:44:25Z","modified":"2024-08-04T03:22:25.655Z","updated_at":"2026-11-02T14:32:59.105382Z"}],"euvd":[{"id":"EUVD-2021-28981","description":"The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests with different certificates to fill the cache and later trigger the replacement of cache entries. The code attempts to select a less-often-used cache entry by means of a random number generator, but this is not done correctly. Remote code execution might be a slight possibility.","status":"published","published":"2021-10-18T13:44:25Z","modified":"2024-08-04T03:22:25Z","updated_at":"2026-11-03T03:24:16.784119Z"}],"ghsa":[{"id":"GHSA-jpr7-w98h-cvgm","title":"The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon...","description":"The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests with different certificates to fill the cache and later trigger the replacement of cache entries. The code attempts to select a less-often-used cache entry by means of a random number generator, but this is not done correctly. Remote code execution might be a slight possibility.","status":"published","published":"2022-05-24T19:17:46Z","modified":"2023-01-30T05:02:52Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:46:43.616467Z"}],"nvd":[{"id":"CVE-2021-41991","description":"The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests with different certificates to fill the cache and later trigger the replacement of cache entries. The code attempts to select a less-often-used cache entry by means of a random number generator, but this is not done correctly. Remote code execution might be a slight possibility.","status":"published","published":"2021-10-18T14:15:10.333Z","modified":"2026-06-17T04:09:07.46Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:06:59.689345Z"}],"osv":[{"id":"ALPINE-CVE-2021-41991","description":"The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests with different certificates to fill the cache and later trigger the replacement of cache entries. The code attempts to select a less-often-used cache entry by means of a random number generator, but this is not done correctly. Remote code execution might be a slight possibility.","status":"published","published":"2021-10-18T14:15:10.333Z","modified":"2026-10-23T17:17:56.217211768Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:48.646074Z"},{"id":"AZL-6897","title":"CVE-2021-41991 affecting package strongswan for versions less than 5.9.5-1","description":"The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests with different certificates to fill the cache and later trigger the replacement of cache entries. The code attempts to select a less-often-used cache entry by means of a random number generator, but this is not done correctly. Remote code execution might be a slight possibility.","status":"published","published":"2021-10-18T14:15:10Z","modified":"2026-04-21T04:38:32.163922Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:08.630357Z"},{"id":"CVE-2021-41991","description":"The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests with different certificates to fill the cache and later trigger the replacement of cache entries. The code attempts to select a less-often-used cache entry by means of a random number generator, but this is not done correctly. Remote code execution might be a slight possibility.","status":"published","published":"2021-10-18T14:15:10.333Z","modified":"2026-10-20T10:54:02.743596888Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:21.557945Z"},{"id":"DEBIAN-CVE-2021-41991","description":"The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests with different certificates to fill the cache and later trigger the replacement of cache entries. The code attempts to select a less-often-used cache entry by means of a random number generator, but this is not done correctly. Remote code execution might be a slight possibility.","status":"published","published":"2021-10-18T14:15:10.333Z","modified":"2026-10-23T18:04:15.818231069Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:35.799676Z"},{"id":"OESA-2021-1408","title":"strongswan security update","description":"The strongSwan IPsec implementation supports both the IKEv1 and IKEv2 key exchange protocols in conjunction with the native NETKEY IPsec stack of the Linux kernel.\r\n\r\nSecurity Fix(es):\r\n\r\nThe gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate with an RSASSA-PSS signature. For example, this can be triggered by an unrelated self-signed CA certificate sent by an initiator. Remote code execution cannot occur.(CVE-2021-41990)\r\n\r\nThe in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests with different certificates to fill the cache and later trigger the replacement of cache entries. The code attempts to select a less-often-used cache entry by means of a random number generator, but this is not done correctly. Remote code execution might be a slight possibility.(CVE-2021-41991)","status":"published","published":"2021-10-30T11:04:40Z","modified":"2026-08-18T01:16:06.525907853Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:38.987987Z"},{"id":"UBUNTU-CVE-2021-41991","description":"The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests with different certificates to fill the cache and later trigger the replacement of cache entries. The code attempts to select a less-often-used cache entry by means of a random number generator, but this is not done correctly. Remote code execution might be a slight possibility.","status":"published","published":"2021-10-18T12:00:00Z","modified":"2026-10-05T19:19:55.780688104Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:29.220315Z"},{"id":"DLA-2788-1","title":"strongswan - security update","status":"published","published":"2021-10-20T00:00:00Z","modified":"2026-03-09T01:19:43.351264Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"DSA-4989-1","title":"strongswan - security update","status":"published","published":"2021-10-18T00:00:00Z","modified":"2026-03-09T02:10:37.923318Z","updated_at":"2026-11-02T15:46:17.19998Z"},{"id":"openSUSE-SU-2021:1399-1","title":"Security update for strongswan","description":"This update for strongswan fixes the following issues:\n\nA feature was added:\n\n- Add auth_els plugin to support Marvell FC-SP encryption (jsc#SLE-20151)\n\nSecurity issues fixed:\n\n- CVE-2021-41991: Fixed an integer overflow when replacing certificates in cache. (bsc#1191435)\n- CVE-2021-41990: Fixed an integer Overflow in the gmp Plugin. (bsc#1191367)\n\n\nThis update was imported from the SUSE:SLE-15-SP2:Update update project.","status":"published","published":"2021-10-31T14:52:34Z","modified":"2026-02-04T04:20:44.765001Z","updated_at":"2026-11-02T16:58:32.266854Z"},{"id":"openSUSE-SU-2021:3467-1","title":"Security update for strongswan","description":"This update for strongswan fixes the following issues:\n\nA feature was added:\n\n- Add auth_els plugin to support Marvell FC-SP encryption (jsc#SLE-20151)\n\nSecurity issues fixed:\n\n- CVE-2021-41991: Fixed an integer overflow when replacing certificates in cache. (bsc#1191435)\n- CVE-2021-41990: Fixed an integer Overflow in the gmp Plugin. (bsc#1191367)\n\n","status":"published","published":"2021-10-19T11:16:45Z","modified":"2026-02-04T03:54:58.746322Z","updated_at":"2026-11-02T16:58:32.266854Z"},{"id":"openSUSE-SU-2024:11655-1","title":"strongswan-5.9.4-1.1 on GA media","description":"These are all security issues fixed in the strongswan-5.9.4-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:10:19.233327Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"SUSE-SU-2021:14827-1","title":"Security update for strongswan","description":"This update for strongswan fixes the following issues:\n\n- CVE-2021-41991: Fixed an integer overflow when replacing certificates in cache. (bsc#1191435)\n","status":"published","published":"2021-10-19T11:16:08Z","modified":"2026-02-04T04:17:56.902893Z","updated_at":"2026-11-02T15:53:49.138643Z"},{"id":"SUSE-SU-2021:3467-1","title":"Security update for strongswan","description":"This update for strongswan fixes the following issues:\n\nA feature was added:\n\n- Add auth_els plugin to support Marvell FC-SP encryption (jsc#SLE-20151)\n\nSecurity issues fixed:\n\n- CVE-2021-41991: Fixed an integer overflow when replacing certificates in cache. (bsc#1191435)\n- CVE-2021-41990: Fixed an integer Overflow in the gmp Plugin. (bsc#1191367)\n\n","status":"published","published":"2021-10-19T11:16:44Z","modified":"2026-02-04T03:50:26.172354Z","updated_at":"2026-11-02T15:53:49.605187Z"},{"id":"SUSE-SU-2021:3468-1","title":"Security update for strongswan","description":"This update for strongswan fixes the following issues:\n\n- CVE-2021-41991: Fixed an integer overflow when replacing certificates in cache. (bsc#1191435)\n","status":"published","published":"2021-10-19T11:16:54Z","modified":"2026-02-04T04:33:47.699356Z","updated_at":"2026-11-02T15:53:49.605187Z"},{"id":"SUSE-SU-2021:3469-1","title":"Security update for strongswan","description":"This update for strongswan fixes the following issues:\n\n- Fix trailing quotation mark missing from example in README. (bsc#1167880)\n- CVE-2021-41991: Fixed an integer overflow when replacing certificates in cache. (bsc#1191435)\n- CVE-2021-41990: Fixed an integer Overflow in the gmp Plugin. (bsc#1191367)\n","status":"published","published":"2021-10-19T13:45:21Z","modified":"2026-02-04T02:23:07.661517Z","updated_at":"2026-11-02T15:53:49.605187Z"},{"id":"USN-5111-1","title":"strongswan vulnerabilities","description":"It was discovered that strongSwan incorrectly handled certain RSASSA-PSS\nsignatures. A remote attacker could use this issue to cause strongSwan to\ncrash, resulting in a denial of service. (CVE-2021-41990)\n\nIt was discovered that strongSwan incorrectly handled replacing\ncertificates in the cache. A remote attacker could use this issue to cause\nstrongSwan to crash, resulting in a denial of service, or possibly execute\narbitrary code. (CVE-2021-41991)\n","status":"published","published":"2021-10-19T10:54:55Z","modified":"2026-04-27T15:57:38.055784Z","updated_at":"2026-11-02T16:58:15.683829Z"},{"id":"USN-5111-2","title":"strongswan vulnerability","description":"USN-5111-1 fixed a vulnerability in strongSwan. This update provides\nthe corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.\n\nOriginal advisory details:\n\n It was discovered that strongSwan incorrectly handled replacing\n certificates in the cache. A remote attacker could use this issue to cause\n strongSwan to crash, resulting in a denial of service, or possibly execute\n arbitrary code. (CVE-2021-41991)\n","status":"published","published":"2021-10-19T15:10:02Z","modified":"2026-06-29T13:49:34.597178876Z","updated_at":"2026-11-02T16:58:15.683829Z"}]}}