strongswan vulnerabilities (Ubuntu)
40 vulnerabilities.
-
strongswanUbuntu libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state... 5.6 Medium -
strongswanUbuntu strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins... 7.1 High -
strongswanUbuntu libcharon in strongSwan 6.0.0 through 6.0.7 has a use-after-free in IKEv2 rekeying collision... 7.5 High -
strongswanUbuntu strongSwan 5.1.3 through 6.0.7 has an infinite loop in the x509 plugin's attribute certificate... 7.5 High -
strongswanUbuntu strongSwan 4.2.0 through 6.0.7 has a missing release of memory after its effective lifetime in... 3.7 Low -
strongswanUbuntu strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute... 7.5 High -
strongswanUbuntu strongSwan 4.6.2 through 6.0.7 has an infinite loop in PKCS#5 decryption. 5.9 Medium -
strongswanUbuntu libcharon in strongSwan 4.1.2 through 6.0.7 has a missing release of memory after its effective... 3.7 Low -
strongswanUbuntu strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka plugin. 5.9 Medium -
strongswanUbuntu strongSwan 5.0.2 through 6.0.7 allows PKCS#7 certificate enumeration in the openssl plugin that... 3.7 Low -
strongswanUbuntu strongSwan 5.0.2 through 6.0.7 has an Expired Pointer Dereference in PKCS#7 parsing in the... 5.9 Medium -
strongswanUbuntu In strongSwan before 6.0.7, identity parsing/cloning is mishandled. Parsed EAP-Identities that... 7.5 High -
strongswanUbuntu Updated strongswan packages fix security vulnerabilities No score -
strongswanUbuntu Updated strongswan packages fix security vulnerabilities No score -
strongswanUbuntu Updated strongswan packages fix security vulnerabilities No score -
strongswanUbuntu Updated strongswan packages fix security vulnerabilities No score -
strongswanUbuntu Updated strongswan packages fix security vulnerabilities No score -
strongswanUbuntu Updated strongswan packages fix security vulnerabilities No score -
strongswanUbuntu Updated strongswan packages fix security vulnerabilities No score -
strongswanUbuntu strongSwan 4.5.0 < 6.0.5 EAP-TTLS AVP Parsing Integer Underflow 8.7 High -
strongswanUbuntu In the eap-mschapv2 plugin (client-side) in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2... 8.1 High -
strongswanUbuntu strongSwan versions 5.9.2 through 5.9.5 are affected by authorization bypass through improper... 7.7 High -
strongswanUbuntu strongSwan before 5.9.12 has a buffer overflow and possible unauthenticated remote code execution... 9.8 Critical -
strongswanUbuntu strongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation... 7.5 High -
strongswanUbuntu In strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early... 9.1 Critical -
strongswanUbuntu The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon... 7.5 High -
strongswanUbuntu The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate... 7.5 High -
strongswanUbuntu The gmp plugin in strongSwan before 5.7.1 has a Buffer Overflow via a crafted certificate. 7.5 High -
strongswanUbuntu In verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c in the gmp plugin in strongSwan 4.x and... 7.5 High -
strongswanUbuntu In verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c in the gmp plugin in strongSwan 4.x and... 7.5 High -
strongswanUbuntu CVE-2018-5389 5.9 Medium -
strongswanUbuntu In stroke_socket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer... 6.5 Medium -
strongswanUbuntu strongSwan 5.6.0 and older allows Remote Denial of Service because of Missing Initialization of a... 7.5 High -
strongswanUbuntu The gmp plugin in strongSwan before 5.6.0 allows remote attackers to cause a denial of service ... 7.5 High -
strongswanUbuntu The ASN.1 parser in strongSwan before 5.5.3 improperly handles CHOICE types when the x509 plugin... 7.5 High -
strongswanUbuntu The gmp plugin in strongSwan before 5.5.3 does not properly validate RSA public keys before... 7.5 High -
strongswanUbuntu The server implementation of the EAP-MSCHAPv2 protocol in the eap-mschapv2 plugin in strongSwan 4... 5.0 Medium -
strongswanUbuntu strongSwan 4.5.x through 5.2.x before 5.2.1 allows remote attackers to cause a denial of service ... 5.0 Medium -
strongswanUbuntu strongSwan 4.3.0 through 5.x before 5.3.2 and strongSwan VPN Client before 1.4.6, when using EAP... 2.6 Low -
strongswanUbuntu IKEv2 in strongSwan 4.0.7 before 5.1.3 allows remote attackers to bypass authentication by... 6.4 Medium