{"id":"CVE-2025-62291","aliases":["ALPINE-CVE-2025-62291","AZL-74660","AZL-74766","DEBIAN-CVE-2025-62291","DLA-4359-1","DSA-6041-1","EUVD-2026-2870","GHSA-p527-wjvq-vxg8","MGASA-2025-0272","OESA-2026-4070","OESA-2026-4071","SUSE-SU-2025:21167-1","SUSE-SU-2025:3834-1","SUSE-SU-2025:3855-1","SUSE-SU-2025:3856-1","SUSE-SU-2025:3857-1","SUSE-SU-2025:3873-1","SUSE-SU-2025:3904-1","UBUNTU-CVE-2025-62291","USN-7841-1","openSUSE-SU-2025:15681-1","openSUSE-SU-2025:20132-1"],"status":"published","title":"In the eap-mschapv2 plugin (client-side) in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2...","description":"In the eap-mschapv2 plugin (client-side) in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted message of size 6 through 8, and cause an integer underflow that potentially results in a heap-based buffer overflow.","severity":{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00983,"percentile":0.62794,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-191"],"published":"2025-10-27T00:00:00Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"Alpine:v3.20","package":"strongswan","fixed_in":["5.9.13-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"strongswan","fixed_in":["5.9.14-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"strongswan","fixed_in":["5.9.14-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"strongswan","fixed_in":["5.9.14-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"strongswan","fixed_in":["5.9.14-r3"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"strongswan","fixed_in":["5.9.14-8"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"strongswan","fixed_in":["5.9.10-4"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"strongswan","fixed_in":["5.9.8-5+deb12u2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"strongswan","fixed_in":["6.0.1-6+deb13u2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"strongswan","fixed_in":["6.0.3-1"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"strongswan","fixed_in":["5.9.1-1+deb11u5"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"strongswan","fixed_in":["5.9.14-1.1.mga9"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"strongswan","fixed_in":["5.9.7-15.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"strongswan","fixed_in":["5.7.2-21.oe2003sp4"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"strongswan","fixed_in":["6.0.1-160000.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"strongswan","fixed_in":["6.0.1-160000.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"strongswan","fixed_in":["5.9.14-150700.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"strongswan","fixed_in":["5.9.14-150700.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP7","package":"strongswan","fixed_in":["5.9.14-150700.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"strongswan","fixed_in":["5.9.12-150600.3.5.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"strongswan","fixed_in":["5.9.12-150600.3.5.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP6","package":"strongswan","fixed_in":["5.9.12-150600.3.5.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"strongswan","fixed_in":["5.9.12-150600.3.5.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"strongswan","fixed_in":["5.9.11-150400.19.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"strongswan","fixed_in":["5.9.11-150400.19.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"strongswan","fixed_in":["5.9.11-150400.19.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"strongswan","fixed_in":["5.9.11-150400.19.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy LTS 4.3","package":"strongswan","fixed_in":["5.9.11-150400.19.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server LTS 4.3","package":"strongswan","fixed_in":["5.9.11-150400.19.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"strongswan","fixed_in":["5.8.2-150200.11.45.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"strongswan","fixed_in":["5.8.2-150200.11.45.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"strongswan","fixed_in":["5.8.2-150200.11.45.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"strongswan","fixed_in":["5.8.2-150200.11.45.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"strongswan","fixed_in":["5.9.11-150500.5.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"strongswan","fixed_in":["5.9.11-150500.5.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"strongswan","fixed_in":["5.9.11-150500.5.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"strongswan","fixed_in":["5.9.11-150500.5.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"strongswan","fixed_in":["5.1.3-26.29.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"strongswan","fixed_in":["5.1.3-26.29.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"strongswan","fixed_in":["5.9.5-2ubuntu2.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:FIPS-updates:22.04:LTS","package":"strongswan","fixed_in":["5.9.5-2ubuntu2.4+Fips1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"strongswan","fixed_in":["5.9.13-2ubuntu4.24.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"strongswan","fixed_in":["6.0.1-6ubuntu4.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"strongswan","fixed_in":["6.0.1-6ubuntu5"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"strongswan","fixed_in":["6.0.3-1.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 16.0","package":"strongswan","fixed_in":["6.0.1-160000.3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.20","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.13-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.14-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.14-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.14-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.14-r3"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.14-8"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.10-4"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.8-5+deb12u2"}]}],"versions":["5.9.8-5","5.9.8-5+deb12u1"]},{"source":"osv","ecosystem":"Debian:13","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.1-6+deb13u2"}]}],"versions":["6.0.1-6","6.0.1-6+deb13u1"]},{"source":"osv","ecosystem":"Debian:14","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.3-1"}]}],"versions":["6.0.1-6","6.0.2-1"]},{"source":"osv","ecosystem":"Debian:11","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.1-1+deb11u5"}]}],"versions":["5.9.1-1","5.9.1-1+deb11u1","5.9.1-1+deb11u2","5.9.1-1+deb11u3","5.9.1-1+deb11u4"]},{"source":"osv","ecosystem":"Debian:12","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.8-5+deb12u2"}]}],"versions":["5.9.8-5","5.9.8-5+deb12u1"]},{"source":"osv","ecosystem":"Debian:13","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.1-6+deb13u2"}]}],"versions":["6.0.1-6","6.0.1-6+deb13u1"]},{"source":"osv","ecosystem":"Mageia:9","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.14-1.1.mga9"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.7-15.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7.2-21.oe2003sp4"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.1-160000.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.1-160000.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.14-150700.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.14-150700.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP7","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.14-150700.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.12-150600.3.5.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.12-150600.3.5.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP6","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.12-150600.3.5.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.12-150600.3.5.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.11-150400.19.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.11-150400.19.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.11-150400.19.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.11-150400.19.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy LTS 4.3","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.11-150400.19.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server LTS 4.3","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.11-150400.19.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-150200.11.45.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-150200.11.45.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-150200.11.45.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-150200.11.45.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.11-150500.5.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.11-150500.5.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.11-150500.5.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.11-150500.5.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.3-26.29.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.3-26.29.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.6.4-9","5.1.0-2","5.1.0-3","5.1.1-0ubuntu1","5.1.1-0ubuntu2","5.1.1-0ubuntu3","5.1.1-0ubuntu4","5.1.1-0ubuntu5","5.1.1-0ubuntu7","5.1.1-0ubuntu14","5.1.1-0ubuntu17","5.1.2~dr3+git20130120-0ubuntu2","5.1.2~dr3+git20130120-0ubuntu3","5.1.2~rc1-0ubuntu3","5.1.2~rc1-0ubuntu4","5.1.2~rc2-0ubuntu2","5.1.2-0ubuntu1","5.1.2-0ubuntu2","5.1.2-0ubuntu2.2","5.1.2-0ubuntu2.3","5.1.2-0ubuntu2.4","5.1.2-0ubuntu2.5","5.1.2-0ubuntu2.6","5.1.2-0ubuntu2.7","5.1.2-0ubuntu2.8","5.1.2-0ubuntu2.10","5.1.2-0ubuntu2.11","5.1.2-0ubuntu2.11+esm1","5.1.2-0ubuntu2.11+esm2","5.1.2-0ubuntu2.11+esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.1.2-0ubuntu6","5.1.2-0ubuntu7","5.1.2-0ubuntu8","5.3.5-1ubuntu1","5.3.5-1ubuntu2","5.3.5-1ubuntu3","5.3.5-1ubuntu3.1","5.3.5-1ubuntu3.2","5.3.5-1ubuntu3.3","5.3.5-1ubuntu3.4","5.3.5-1ubuntu3.5","5.3.5-1ubuntu3.7","5.3.5-1ubuntu3.8","5.3.5-1ubuntu3.8+esm1","5.3.5-1ubuntu3.8+esm2","5.3.5-1ubuntu3.8+esm3","5.3.5-1ubuntu3.8+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:16.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.5-1ubuntu3.fips.3.4.1","5.3.5-1ubuntu3.fips.3.4.2","5.3.5-1ubuntu3.fips.3.8.1","5.3.5-1ubuntu3.fips.3.8.2","5.3.5-1ubuntu3.fips.3.8.3","5.3.5-1ubuntu3.fips.3.8.6","5.3.5-1ubuntu3.fips.3.8.7"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS:16.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.5-1ubuntu3.fips.3.1","5.3.5-1ubuntu3.fips.3.2","5.3.5-1ubuntu3.fips.3.3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.5.1-4ubuntu2","5.5.1-4ubuntu3","5.6.1-2ubuntu1","5.6.1-2ubuntu2","5.6.1-2ubuntu3","5.6.1-2ubuntu4","5.6.2-1ubuntu2","5.6.2-1ubuntu2.2","5.6.2-1ubuntu2.3","5.6.2-1ubuntu2.4","5.6.2-1ubuntu2.5","5.6.2-1ubuntu2.6","5.6.2-1ubuntu2.7","5.6.2-1ubuntu2.8","5.6.2-1ubuntu2.9","5.6.2-1ubuntu2.9+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:18.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.6.2-1ubuntu2.fips.2.5.1","5.6.2-1ubuntu2.fips.2.7.1","5.6.2-1ubuntu2.fips.2.7.2","5.6.2-1ubuntu2.fips.2.8.1","5.6.2-1ubuntu2.fips.2.9","5.6.2-1ubuntu2.fips.2.9+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS:18.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.6.2-1ubuntu2.fips.2.4.2","5.6.2-1ubuntu2.fips.2.5.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.7.2-1ubuntu3","5.8.1-1ubuntu1","5.8.2-1ubuntu1","5.8.2-1ubuntu2","5.8.2-1ubuntu3","5.8.2-1ubuntu3.1","5.8.2-1ubuntu3.2","5.8.2-1ubuntu3.3","5.8.2-1ubuntu3.4","5.8.2-1ubuntu3.5","5.8.2-1ubuntu3.6"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:20.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.2-1ubuntu3.fips.3.1.2","5.8.2-1ubuntu3.fips.3.3.1","5.8.2-1ubuntu3.fips.3.4.1","5.8.2-1ubuntu3.fips.3.5","5.8.2-1ubuntu3.fips.3.6"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS:20.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.2-1ubuntu3.fips.3.1.2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.5-2ubuntu2.4"}]}],"versions":["5.9.1-1ubuntu3","5.9.1-1ubuntu3.1","5.9.4-1ubuntu1","5.9.4-1ubuntu2","5.9.4-1ubuntu3","5.9.4-1ubuntu4","5.9.5-2ubuntu1","5.9.5-2ubuntu2","5.9.5-2ubuntu2.1","5.9.5-2ubuntu2.2","5.9.5-2ubuntu2.3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-preview:22.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.9.5-2ubuntu2.1+Fips1","5.9.5-2ubuntu2.2+Fips1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:22.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.5-2ubuntu2.4+Fips1"}]}],"versions":["5.9.5-2ubuntu2.1+Fips1","5.9.5-2ubuntu2.2+Fips1","5.9.5-2ubuntu2.3+Fips1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.13-2ubuntu4.24.04.1"}]}],"versions":["5.9.11-1ubuntu1","5.9.11-1ubuntu2","5.9.12-1ubuntu1","5.9.13-2ubuntu1","5.9.13-2ubuntu3","5.9.13-2ubuntu4"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.1-6ubuntu4.1"}]}],"versions":["5.9.13-2ubuntu4","5.9.13-2ubuntu5","6.0.1-6ubuntu2","6.0.1-6ubuntu4"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.1-6ubuntu5"}]}],"versions":["6.0.1-6ubuntu4"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.5-2ubuntu2.4"}]}],"versions":["5.9.1-1ubuntu3","5.9.1-1ubuntu3.1","5.9.4-1ubuntu1","5.9.4-1ubuntu2","5.9.4-1ubuntu3","5.9.4-1ubuntu4","5.9.5-2ubuntu1","5.9.5-2ubuntu2","5.9.5-2ubuntu2.1","5.9.5-2ubuntu2.2","5.9.5-2ubuntu2.3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.13-2ubuntu4.24.04.1"}]}],"versions":["5.9.11-1ubuntu1","5.9.11-1ubuntu2","5.9.12-1ubuntu1","5.9.13-2ubuntu1","5.9.13-2ubuntu3","5.9.13-2ubuntu4"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.1-6ubuntu4.1"}]}],"versions":["5.9.13-2ubuntu4","5.9.13-2ubuntu5","6.0.1-6ubuntu2","6.0.1-6ubuntu4"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.3-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.1-160000.3.1"}]}]}],"products":[{"vendor":"strongswan","product":"strongswan"}],"references":[{"url":"https://github.com/strongswan/strongswan/releases","tags":["package"]},{"url":"https://github.com/strongswan/strongswan/commits/master/src/libcharon/plugins/eap_mschapv2","tags":["web"]},{"url":"https://www.strongswan.org/blog/2025/10/27/strongswan-vulnerability-%28cve-2025-62291%29.html","tags":["article"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/11/msg00002.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-62291","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-p527-wjvq-vxg8"},{"url":"https://security.alpinelinux.org/vuln/CVE-2025-62291","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/62xxx/CVE-2025-62291.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-62291","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2025-0272.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34705","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/QVE27CU4U3DGHAD4EVF75YM3RK423ZQS/","tags":["web"]},{"url":"https://www.strongswan.org/blog/2025/10/27/strongswan-vulnerability-(cve-2025-62291).html","tags":["web","report"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4070","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4071","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202521167-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1251941","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-62291","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20253834-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20253855-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20253856-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20253857-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20253873-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20253904-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-62291","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-62291","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7841-1","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-62291","description":"In the eap-mschapv2 plugin (client-side) in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted message of size 6 through 8, and cause an integer underflow that potentially results in a heap-based buffer overflow.","status":"published","published":"2026-01-16T00:00:00Z","modified":"2026-01-16T19:07:43.455Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-191"],"updated_at":"2026-11-02T14:32:54.87586Z"}],"euvd":[{"id":"EUVD-2026-2870","description":"In the eap-mschapv2 plugin (client-side) in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted message of size 6 through 8, and cause an integer underflow that potentially results in a heap-based buffer overflow.","status":"published","published":"2026-01-16T00:00:00Z","modified":"2026-01-16T19:07:43Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T19:48:50.882066Z"}],"ghsa":[{"id":"GHSA-p527-wjvq-vxg8","title":"In the eap-mschapv2 plugin (client-side) in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2...","description":"In the eap-mschapv2 plugin (client-side) in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted message of size 6 through 8, and cause an integer underflow that potentially results in a heap-based buffer overflow.","status":"published","published":"2026-01-16T21:30:37Z","modified":"2026-01-16T21:30:44Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-191"],"updated_at":"2026-11-02T15:05:39.318179Z"}],"nvd":[{"id":"CVE-2025-62291","description":"In the eap-mschapv2 plugin (client-side) in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted message of size 6 through 8, and cause an integer underflow that potentially results in a heap-based buffer overflow.","status":"published","published":"2026-01-16T19:16:18.163Z","modified":"2026-06-17T09:51:42.24Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-191"],"updated_at":"2026-11-02T14:11:57.915063Z"}],"osv":[{"id":"ALPINE-CVE-2025-62291","description":"In the eap-mschapv2 plugin (client-side) in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted message of size 6 through 8, and cause an integer underflow that potentially results in a heap-based buffer overflow.","status":"published","published":"2026-01-16T19:16:18.163Z","modified":"2026-08-27T22:18:02.997185939Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:50.269992Z"},{"id":"CVE-2025-62291","description":"In the eap-mschapv2 plugin (client-side) in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted message of size 6 through 8, and cause an integer underflow that potentially results in a heap-based buffer overflow.","status":"published","published":"2026-01-16T00:00:00Z","modified":"2026-10-28T02:30:36.762088929Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-191"],"updated_at":"2026-11-02T15:44:51.516975Z"},{"id":"DEBIAN-CVE-2025-62291","description":"In the eap-mschapv2 plugin (client-side) in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted message of size 6 through 8, and cause an integer underflow that potentially results in a heap-based buffer overflow.","status":"published","published":"2026-01-16T19:16:18.163Z","modified":"2026-09-01T20:05:55.621536187Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:47.697959Z"},{"id":"OESA-2026-4070","title":"strongswan security update","description":"The strongSwan IPsec implementation supports both the IKEv1 and IKEv2 key exchange protocols in conjunction with the native NETKEY IPsec stack of the Linux kernel.\r\n\r\nSecurity Fix(es):\n\nIn the eap-mschapv2 plugin (client-side) in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted message of size 6 through 8, and cause an integer underflow that potentially results in a heap-based buffer overflow.(CVE-2025-62291)","status":"published","published":"2026-09-25T01:28:03Z","modified":"2026-09-25T01:45:08.351240034Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:47.643553Z"},{"id":"OESA-2026-4071","title":"strongswan security update","description":"The strongSwan IPsec implementation supports both the IKEv1 and IKEv2 key exchange protocols in conjunction with the native NETKEY IPsec stack of the Linux kernel.\r\n\r\nSecurity Fix(es):\n\nIn the eap-mschapv2 plugin (client-side) in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted message of size 6 through 8, and cause an integer underflow that potentially results in a heap-based buffer overflow.(CVE-2025-62291)","status":"published","published":"2026-09-25T01:28:03Z","modified":"2026-09-25T01:45:08.198775761Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:47.643553Z"},{"id":"UBUNTU-CVE-2025-62291","description":"In the eap-mschapv2 plugin (client-side) in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted message of size 6 through 8, and cause an integer underflow that potentially results in a heap-based buffer overflow.","status":"published","published":"2025-10-27T12:00:00Z","modified":"2026-10-05T19:21:43.372114801Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:55:50.817402Z"},{"id":"AZL-74660","title":"CVE-2025-62291 affecting package strongswan for versions less than 5.9.14-8","description":"In the eap-mschapv2 plugin (client-side) in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted message of size 6 through 8, and cause an integer underflow that potentially results in a heap-based buffer overflow.","status":"published","published":"2026-01-16T19:16:18Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:24.456773Z"},{"id":"AZL-74766","title":"CVE-2025-62291 affecting package strongswan for versions less than 5.9.10-4","description":"In the eap-mschapv2 plugin (client-side) in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted message of size 6 through 8, and cause an integer underflow that potentially results in a heap-based buffer overflow.","status":"published","published":"2026-01-16T19:16:18Z","modified":"2026-04-21T04:38:46.805019Z","updated_at":"2026-11-02T15:28:09.474476Z"},{"id":"DLA-4359-1","title":"strongswan - security update","status":"published","published":"2025-11-03T00:00:00Z","modified":"2025-11-03T12:49:48.544407Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"DSA-6041-1","title":"strongswan - security update","status":"published","published":"2025-10-27T00:00:00Z","modified":"2026-03-09T02:10:15.179801Z","updated_at":"2026-11-02T15:46:18.296714Z"},{"id":"MGASA-2025-0272","title":"Updated strongswan packages fix security vulnerability","description":"Buffer Overflow When Handling EAP-MSCHAPv2 Failure Requests.\n(CVE-2025-62291)\n","status":"published","published":"2025-11-10T18:54:22Z","modified":"2026-04-16T04:43:06.083398963Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"openSUSE-SU-2025:15681-1","title":"strongswan-6.0.3-1.1 on GA media","description":"These are all security issues fixed in the strongswan-6.0.3-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-10-29T00:00:00Z","modified":"2026-03-23T04:54:05.350697Z","updated_at":"2026-11-02T16:58:37.810934Z"},{"id":"openSUSE-SU-2025:20132-1","title":"Security update for strongswan","description":"This update for strongswan fixes the following issues:\n\n- CVE-2025-62291: Fixed buffer overflow when handling EAP-MSCHAPv2 failure requests (bsc#1251941).\n","status":"published","published":"2025-12-02T13:11:59Z","modified":"2026-03-23T04:54:18.206754Z","updated_at":"2026-11-02T16:58:38.101535Z"},{"id":"SUSE-SU-2025:21167-1","title":"Security update for strongswan","description":"This update for strongswan fixes the following issues:\n\n- CVE-2025-62291: Fixed buffer overflow when handling EAP-MSCHAPv2 failure requests (bsc#1251941).\n","status":"published","published":"2025-12-02T13:13:07Z","modified":"2026-03-23T04:51:14.472469Z","updated_at":"2026-11-02T15:54:00.344164Z"},{"id":"SUSE-SU-2025:3834-1","title":"Security update for strongswan","description":"This update for strongswan fixes the following issues:\n\n  - CVE-2025-62291: fixed buffer overflow when handling EAP-MSCHAPv2 failure requests (bsc#1251941)\n","status":"published","published":"2025-10-28T10:30:15Z","modified":"2026-02-04T02:59:44.750423Z","updated_at":"2026-11-02T15:54:00.344164Z"},{"id":"SUSE-SU-2025:3855-1","title":"Security update for strongswan","description":"This update for strongswan fixes the following issues:\n\n  - CVE-2025-62291: fixed buffer overflow when handling EAP-MSCHAPv2 failure requests (bsc#1251941)\n","status":"published","published":"2025-10-29T14:15:40Z","modified":"2026-03-23T04:49:19.800223Z","updated_at":"2026-11-02T15:54:00.344164Z"},{"id":"SUSE-SU-2025:3856-1","title":"Security update for strongswan","description":"This update for strongswan fixes the following issues:\n\n  - CVE-2025-62291: fixed a buffer overflow when handling EAP-MSCHAPv2 failure requests (bsc#1251941)\n","status":"published","published":"2025-10-29T14:16:31Z","modified":"2026-03-23T04:51:19.515089Z","updated_at":"2026-11-02T15:54:00.344164Z"},{"id":"SUSE-SU-2025:3857-1","title":"Security update for strongswan","description":"This update for strongswan fixes the following issues:\n\n  - CVE-2025-62291: fixed buffer overflow when handling EAP-MSCHAPv2 failure requests (bsc#1251941)\n","status":"published","published":"2025-10-29T14:16:52Z","modified":"2026-03-23T04:51:19.559956Z","updated_at":"2026-11-02T15:54:00.344164Z"},{"id":"SUSE-SU-2025:3873-1","title":"Security update for strongswan","description":"This update for strongswan fixes the following issues:\n\n  - CVE-2025-62291: fixed a buffer overflow when handling EAP-MSCHAPv2 failure requests (bsc#1251941)\n","status":"published","published":"2025-10-30T15:10:54Z","modified":"2026-03-23T04:51:20.097727Z","updated_at":"2026-11-02T15:54:00.344164Z"},{"id":"SUSE-SU-2025:3904-1","title":"Security update for strongswan","description":"This update for strongswan fixes the following issues:\n\n  - CVE-2025-62291: fixed buffer overflow when handling EAP-MSCHAPv2 failure requests (bsc#1251941)\n","status":"published","published":"2025-11-01T06:27:07Z","modified":"2026-03-23T04:51:20.451014Z","updated_at":"2026-11-02T15:54:00.344164Z"},{"id":"USN-7841-1","title":"strongswan vulnerability","description":"Xu Biang discovered that the strongSwan client incorrectly handled\nEAP-MSCHAPv2 failure requests. If a user or automated system were tricked\ninto connecting to a malicious server, a remote attacker could use this\nissue to cause strongSwan to crash, resulting in a denial of service, or\npossibly execute arbitrary code.","status":"published","published":"2025-10-27T15:05:57Z","modified":"2026-04-27T18:24:52.46967Z","updated_at":"2026-11-02T16:58:21.91885Z"}]}}