1619 matches found
Session fixation
The rsapssparamsparse function in libstrongswan/credentials/keys/signatureparams.c in strongSwan 5.6.1 allows remote attackers to cause a denial of service via a crafted RSASSA-PSS signature that lacks a mask generation function parameter...
DEBIAN-CVE-2018-6459
The rsapssparamsparse function in libstrongswan/credentials/keys/signatureparams.c in strongSwan 5.6.1 allows remote attackers to cause a denial of service via a crafted RSASSA-PSS signature that lacks a mask generation function parameter...
CVE-2018-6459
The rsapssparamsparse function in libstrongswan/credentials/keys/signatureparams.c in strongSwan 5.6.1 allows remote attackers to cause a denial of service via a crafted RSASSA-PSS signature that lacks a mask generation function parameter...
CVE-2018-6459
CVE-2018-6459 – strongSwan DoS in RSASSA-PSS parsing affected software/versions: strongSwan 5.6.1 (RSA-PSS signature parsing code in libstrongswan/credentials/keys/signature_params.c). root cause: the rsa_pss_params_parse function mishandles a missing mask generation function (MGF) parameter in R...
Debian: Security Advisory (DLA-1059-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
strongswan - Insufficient input validation in RSASSA-PSS signature parser
Strongswan Release Notes reports: Fixed a DoS vulnerability in the parser for PKCS1 RSASSA-PSS signatures that was caused by insufficient input validation. One of the configurable parameters in algorithm identifier structures for RSASSA-PSS signatures is the mask generation function MGF. Only MGF...
Debian: Security Advisory (DLA-973-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
strongswan/fuzz_certs: Crash in asn1_length
Detailed report: https://oss-fuzz.com/testcase?key=4842326636625920 Project: strongswan Fuzzer: aflstrongswanfuzzcerts Fuzz target binary: fuzzcerts Job Type: aflasanstrongswan Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7ffc00000003 Crash State: asn1length iterate...
Critical Photon OS Security Update - PHSA-2017-0080
Updates of 'libgcrypt', 'strongswan', 'libtar', 'unzip', 'glibc', 'openjdk' packages of Photon OS have been released...
strongSwan gmp Plugin Denial of Service (CVE-2017-11185)
A denial-of-service vulnerability exists in strongSwan. The vulnerability is due to insufficient validation of RSA signature values before their use within the gmp plugin. A remote attacker could exploit this vulnerability by sending a crafted message to the target server...
Code injection
strongSwan 5.2.2 and 5.3.0 allows remote attackers to cause a denial of service daemon crash or execute arbitrary code...
CVE-2015-3991
strongSwan 5.2.2 and 5.3.0 allows remote attackers to cause a denial of service daemon crash or execute arbitrary code...
CVE-2015-3991
strongSwan 5.2.2 and 5.3.0 allows remote attackers to cause a denial of service daemon crash or execute arbitrary code...
DEBIAN-CVE-2015-3991
strongSwan 5.2.2 and 5.3.0 allows remote attackers to cause a denial of service daemon crash or execute arbitrary code...
CVE-2015-3991
strongSwan 5.2.2 and 5.3.0 allows remote attackers to cause a denial of service daemon crash or execute arbitrary code...
CVE-2015-3991
CVE-2015-3991 affects strongSwan versions 5.2.2 and 5.3.0, enabling a remote attacker to cause a daemon crash (DoS) or execute arbitrary code. Public references across OSV, NVD, Debian/CVEs corroborate the issue. Fedora advisory notes a later update (5.3.2) fixes this CVE; other entries (openSUSE...
CVE-2015-3991
strongSwan 5.2.2 and 5.3.0 allows remote attackers to cause a denial of service daemon crash or execute arbitrary code...
Debian DSA-3962-1 : strongswan - security update
A denial of service vulnerability was identified in strongSwan, an IKE/IPsec suite, using Google's OSS-Fuzz fuzzing project. The gmp plugin in strongSwan had insufficient input validation when verifying RSA signatures. This coding error could lead to a NULL pointer dereference, leading to process...
[SECURITY] [DSA 3962-1] strongswan security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3962-1 [email protected] https://www.debian.org/security/ Yves-Alexis Perez September 03, 2017 https://www.debian.org/security/faq -...