Lucene search
K

The vulnerability of the EAP-MSCHAPv2 VPN-client plugin from StrongSwan allows a hacker to execute arbitrary code and trigger a service denial.

🗓️ 02 Mar 2026 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType 
bdu_fstec
 bdu_fstec
🔗 bdu.fstec.ru👁 1 Views

StrongSwan EAP-MSCHAPv2 VPN plugin overflow enables arbitrary code execution and denial of service.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
FreeBSD
strongSwan -- Heap-based buffer overflow in eap-mschapv2 plugin due to improper handling of failure request packets
27 Oct 202500:00
freebsd
ATTACKERKB
CVE-2025-62291
16 Jan 202600:00
attackerkb
AlpineLinux
CVE-2025-62291
16 Jan 202600:00
alpinelinux
AstraLinux
Astra Linux – Vulnerability in StrongSwan
13 Jan 202614:01
astralinux
CBLMariner
CVE-2025-62291 affecting package strongswan for versions less than 5.9.14-8
22 Jan 202618:04
cbl_mariner
CBLMariner
CVE-2025-62291 affecting package strongswan for versions less than 5.9.10-4
21 Jan 202616:02
cbl_mariner
Circl
CVE-2025-62291
27 Oct 202522:15
circl
CNNVD
strongSwan numerical error vulnerability
16 Jan 202600:00
cnnvd
CVE
CVE-2025-62291
16 Jan 202600:00
cve
Cvelist
CVE-2025-62291
16 Jan 202600:00
cvelist
Rows per page
Vulners
Node
OROR
canonicalubuntuMatch25.10

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

26 May 2026 00:00Current
6.4Medium risk
Vulners AI Score6.4
CVSS 37.5
CVSS 27.8
EPSS0.00879
1