AZL-74766 CVE-2025-62291 affecting package strongswan for versions less than 5.9.10-4

In the eap-mschapv2 plugin client-side in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted message of size 6 through 8, and cause an integer underflow that potentially results in a heap-based buffer overflow...

openSUSE 16 Security Update : strongswan (openSUSE-SU-2025-20132-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2025-20132-1 advisory. - CVE-2025-62291: Fixed buffer overflow when handling EAP-MSCHAPv2 failure requests bsc1251941. Tenable has extracted the preceding description block...

SUSE-SU-2025:3857-1 Security update for strongswan

This update for strongswan fixes the following issues: - CVE-2025-62291: fixed buffer overflow when handling EAP-MSCHAPv2 failure requests bsc1251941...