strongswan vulnerabilities (Debian)
57 vulnerabilities.
-
strongswanDebian libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state... 5.6 Medium -
strongswanDebian strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins... 7.1 High -
strongswanDebian libcharon in strongSwan 6.0.0 through 6.0.7 has a use-after-free in IKEv2 rekeying collision... 7.5 High -
strongswanDebian strongSwan 5.1.3 through 6.0.7 has an infinite loop in the x509 plugin's attribute certificate... 7.5 High -
strongswanDebian strongSwan 4.2.0 through 6.0.7 has a missing release of memory after its effective lifetime in... 3.7 Low -
strongswanDebian strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute... 7.5 High -
strongswanDebian strongSwan 4.6.2 through 6.0.7 has an infinite loop in PKCS#5 decryption. 5.9 Medium -
strongswanDebian libcharon in strongSwan 4.1.2 through 6.0.7 has a missing release of memory after its effective... 3.7 Low -
strongswanDebian strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka plugin. 5.9 Medium -
strongswanDebian strongSwan 5.0.2 through 6.0.7 allows PKCS#7 certificate enumeration in the openssl plugin that... 3.7 Low -
strongswanDebian strongSwan 5.0.2 through 6.0.7 has an Expired Pointer Dereference in PKCS#7 parsing in the... 5.9 Medium -
strongswanDebian In strongSwan before 6.0.7, identity parsing/cloning is mishandled. Parsed EAP-Identities that... 7.5 High -
strongswanDebian Updated strongswan packages fix security vulnerabilities No score -
strongswanDebian Updated strongswan packages fix security vulnerabilities No score -
strongswanDebian Updated strongswan packages fix security vulnerabilities No score -
strongswanDebian Updated strongswan packages fix security vulnerabilities No score -
strongswanDebian Updated strongswan packages fix security vulnerabilities No score -
strongswanDebian Updated strongswan packages fix security vulnerabilities No score -
strongswanDebian Updated strongswan packages fix security vulnerabilities No score -
strongswanDebian strongSwan 4.5.0 < 6.0.5 EAP-TTLS AVP Parsing Integer Underflow 8.7 High -
strongswanDebian In the eap-mschapv2 plugin (client-side) in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2... 8.1 High -
strongswanDebian strongSwan versions 5.9.2 through 5.9.5 are affected by authorization bypass through improper... 7.7 High -
strongswanDebian strongSwan before 5.9.12 has a buffer overflow and possible unauthenticated remote code execution... 9.8 Critical -
strongswanDebian strongSwan 5.9.8 and 5.9.9 potentially allows remote code execution because it uses a variable... 9.8 Critical -
strongswanDebian strongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation... 7.5 High -
strongswanDebian In strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early... 9.1 Critical -
strongswanDebian The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon... 7.5 High -
strongswanDebian The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate... 7.5 High -
strongswanDebian The Libreswan Project has found a vulnerability in the processing of IKEv1 informational exchange... 3.1 Low -
strongswanDebian The gmp plugin in strongSwan before 5.7.1 has a Buffer Overflow via a crafted certificate. 7.5 High -
strongswanDebian In verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c in the gmp plugin in strongSwan 4.x and... 7.5 High -
strongswanDebian In verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c in the gmp plugin in strongSwan 4.x and... 7.5 High -
strongswanDebian CVE-2018-5389 5.9 Medium -
strongswanDebian In stroke_socket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer... 6.5 Medium -
strongswanDebian strongSwan 5.6.0 and older allows Remote Denial of Service because of Missing Initialization of a... 7.5 High -
strongswanDebian The rsa_pss_params_parse function in libstrongswan/credentials/keys/signature_params.c in... 5.3 Medium -
strongswanDebian strongSwan 5.2.2 and 5.3.0 allows remote attackers to cause a denial of service (daemon crash) or... 9.8 Critical -
strongswanDebian The gmp plugin in strongSwan before 5.6.0 allows remote attackers to cause a denial of service ... 7.5 High -
strongswanDebian The ASN.1 parser in strongSwan before 5.5.3 improperly handles CHOICE types when the x509 plugin... 7.5 High -
strongswanDebian The gmp plugin in strongSwan before 5.5.3 does not properly validate RSA public keys before... 7.5 High -
strongswanDebian The server implementation of the EAP-MSCHAPv2 protocol in the eap-mschapv2 plugin in strongSwan 4... 5.0 Medium -
strongswanDebian strongSwan 4.5.x through 5.2.x before 5.2.1 allows remote attackers to cause a denial of service ... 5.0 Medium -
strongswanDebian strongSwan 4.3.0 through 5.x before 5.3.2 and strongSwan VPN Client before 1.4.6, when using EAP... 2.6 Low -
strongswanDebian strongSwan before 5.1.2 allows remote attackers to cause a denial of service (NULL pointer... 5.0 Medium -
strongswanDebian IKEv2 in strongSwan 4.0.7 before 5.1.3 allows remote attackers to bypass authentication by... 6.4 Medium -
strongswanDebian strongSwan 5.0.2 through 5.1.0 allows remote attackers to cause a denial of service (NULL pointer... 5.0 Medium -
strongswanDebian The compare_dn function in utils/identification.c in strongSwan 4.3.3 through 5.1.1 allows (1)... 5.0 Medium -
strongswanDebian Buffer overflow in the atodn function in strongSwan 2.0.0 through 4.3.4, when Opportunistic... 5.1 Medium -
strongswanDebian strongSwan 4.3.5 through 5.0.3, when using the OpenSSL plugin for ECDSA signature verification,... 4.9 Medium -
strongswanDebian The GMP Plugin in strongSwan 4.2.0 through 4.6.3 allows remote attackers to bypass authentication... 7.5 High - Show olderLoading…