strongswan vulnerabilities (Azure Linux)
20 vulnerabilities.
-
strongswanAzure Linux libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state... 5.6 Medium -
strongswanAzure Linux strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins... 7.1 High -
strongswanAzure Linux libcharon in strongSwan 6.0.0 through 6.0.7 has a use-after-free in IKEv2 rekeying collision... 7.5 High -
strongswanAzure Linux strongSwan 5.1.3 through 6.0.7 has an infinite loop in the x509 plugin's attribute certificate... 7.5 High -
strongswanAzure Linux strongSwan 4.2.0 through 6.0.7 has a missing release of memory after its effective lifetime in... 3.7 Low -
strongswanAzure Linux strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute... 7.5 High -
strongswanAzure Linux strongSwan 4.6.2 through 6.0.7 has an infinite loop in PKCS#5 decryption. 5.9 Medium -
strongswanAzure Linux libcharon in strongSwan 4.1.2 through 6.0.7 has a missing release of memory after its effective... 3.7 Low -
strongswanAzure Linux strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka plugin. 5.9 Medium -
strongswanAzure Linux strongSwan 5.0.2 through 6.0.7 allows PKCS#7 certificate enumeration in the openssl plugin that... 3.7 Low -
strongswanAzure Linux strongSwan 5.0.2 through 6.0.7 has an Expired Pointer Dereference in PKCS#7 parsing in the... 5.9 Medium -
strongswanAzure Linux In strongSwan before 6.0.7, identity parsing/cloning is mishandled. Parsed EAP-Identities that... 7.5 High -
strongswanAzure Linux strongSwan 4.5.0 < 6.0.5 EAP-TTLS AVP Parsing Integer Underflow 8.7 High -
strongswanAzure Linux In the eap-mschapv2 plugin (client-side) in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2... 8.1 High -
strongswanAzure Linux strongSwan before 5.9.12 has a buffer overflow and possible unauthenticated remote code execution... 9.8 Critical -
strongswanAzure Linux strongSwan 5.9.8 and 5.9.9 potentially allows remote code execution because it uses a variable... 9.8 Critical -
strongswanAzure Linux strongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation... 7.5 High -
strongswanAzure Linux In strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early... 9.1 Critical -
strongswanAzure Linux The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon... 7.5 High -
strongswanAzure Linux The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate... 7.5 High