strongSwan -- Heap-based buffer overflow in eap-mschapv2 plugin due to improper handling of failure request packets

Xu Biang reports: The eap-mschapv2 plugin doesn't correctly check the length of an EAP-MSCHAPv2 Failure Request packet on the client, which can cause an integer underflow that leads to a crash and, depending on the compiler options, even a heap-based buffer overflow that's potentially exploitable...

EUVD-2013-4056

Malware in sbrugna...

EUVD-2009-1378

Malware in sbrugna...

EUVD-2017-4533

Malware in sbrugna...

EUVD-2018-1100

Malware in sbrugna...

EUVD-2013-4118

Malware in sbrugna...

EUVD-2020-6451

Malware in sbrugna...

EUVD-2015-5285

Malware in sbrugna...

EUVD-2015-4167

Malware in sbrugna...

EUVD-2012-5396

Malware in sbrugna...

EUVD-2019-8964

Malware in sbrugna...

EUVD-2019-2125

Malware in sbrugna...

EUVD-2019-5967

Malware in sbrugna...

EUVD-2018-2245

Malware in sbrugna...

EUVD-2012-4477

Malware in sbrugna...

EUVD-2019-13486

Malware in sbrugna...

EUVD-2015-5287

Malware in sbrugna...

EUVD-2018-2244

Malware in sbrugna...

EUVD-2015-4170

Malware in sbrugna...

EUVD-2019-18869

Malware in sbrugna...