123 matches found
CVE-2026-25075-check
CVE-2026-25075 脆弱性評価ツール strongSwan VPN サーバーが CVE-2026-25075 に対して脆弱かどうかを、サービスを停止させることなく安全に検出します。詳細は Bishop Fox ブログ の完全な解説記事をご覧ください。 概要 CVE-2026-25075 は、strongSwan の EAP-TTLS プラグインにおける整数アンダーフロー脆弱性であり、リモートの認証されていない攻撃者が特別に細工した EAP-TTLS メッセージを送信することで IKE デーモンをクラッシュさせることができます。この脆弱性は strongSwan バージョン...
CVE-2026-81851
Fireware OS (WatchGuard) is affected by a heap-based buffer overflow in the iked (IKE daemon) process. An authenticated administrator can crash iked by saving a specially crafted configuration , leading to a denial of service . The CVSS 4.0 score is 6.9 (Medium) , reflecting high availability imp...
CVE-2026-81851 Fireware OS Heap-Based Buffer Overflow in iked Allows Denial of Service
A heap-based buffer overflow vulnerability in Fireware OS's iked process allows an authenticated administrator to crash the IKE daemon iked, resulting in a denial of service, by saving a specially crafted configuration...
CVE-2026-81851 Fireware OS Heap-Based Buffer Overflow in iked Allows Denial of Service
A heap-based buffer overflow vulnerability in Fireware OS's iked process allows an authenticated administrator to crash the IKE daemon iked, resulting in a denial of service, by saving a specially crafted configuration...
CVE-2026-63914
A flaw was found in the Linux kernel's xfrm and afkey modules. The xfrmsendmigrate and pfkeysendmigrate functions incorrectly hardcode the initnet initial network namespace for migration notifications. This misconfiguration leads to two main issues: migration notifications are delivered to the...
Vulnerabilities found in Juniper Networks’ Junos OS and Junos OS Evolved
Juniper has identified several vulnerabilities in Junos OS and Junos OS Evolved, specifically related to devices in the MX Series, PTX Series, QFX Series, EX Series, SRX Series, and QFX10000 Series. These vulnerabilities affect various components of Junos OS and Junos OS Evolved, including the...
CVE-2026-57024
A Use of Multiple Resources with Duplicate Identifier vulnerability in the IKE daemon iked of Juniper Networks Junos OS on MX with SPC3 and SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service DoS. On an MX with SPC3 and SRX devices configured for VPN service,...
CVE-2026-57024 Junos OS: MX with SPC3, SRX Series: Repeated VPN negotiation failures will eventually cause iked to crash continuously
A Use of Multiple Resources with Duplicate Identifier vulnerability in the IKE daemon iked of Juniper Networks Junos OS on MX with SPC3 and SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service DoS. On an MX with SPC3 and SRX devices configured for VPN service,...
Juniper Junos OS Vulnerability (JSA107868)
The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA107868 advisory. - An Improper Validation of Syntactic Correctness of Input vulnerability in the IPsec library used by kmd and iked of Juniper Networks Junos OS on SRX Series and MX Series...
AZL-80300 CVE-2026-25075 affecting package strongswan for versions less than 5.9.14-9
strongSwan versions 4.5.0 prior to 6.0.5 contain an integer underflow vulnerability in the EAP-TTLS AVP parser that allows unauthenticated remote attackers to cause a denial of service by sending crafted AVP data with invalid length fields during IKEv2 authentication. Attackers can exploit the...
CVE-2026-25075: Integer Underflow (Wrap or Wraparound)
strongSwan versions 4.5.0 prior to 6.0.5 contain an integer underflow vulnerability in the EAP-TTLS AVP parser that allows unauthenticated remote attackers to cause a denial of service by sending crafted AVP data with invalid length fields during IKEv2 authentication. Attackers can exploit the...
CVE-2025-14733
WatchGuard Fireware OS is affected by CVE-2025-14733 (Out-of-bounds Write in the iked process) that enables remote unauthenticated code execution when Mobile User VPN (IKEv2) or Branch Office VPN (IKEv2) is configured with a dynamic gateway peer. Affected versions include Fireware OS 11.10.2–11.1...
EUVD-2019-3949
Malware in sbrugna...
EUVD-2009-2654
Malware in sbrugna...
EUVD-2015-4075
Malware in sbrugna...
EUVD-2010-2632
Malware in sbrugna...
EUVD-2004-0155
Malware in sbrugna...
EUVD-2011-4025
Malware in sbrugna...