CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

16 matches found

ArchLinux•added 2018/05/26 12:0 a.m.•30 views

[ASA-201805-26] strongswan: denial of service

Arch Linux Security Advisory ASA-201805-26 ========================================== Severity: Low Date : 2018-05-26 CVE-ID : CVE-2018-5388 Package : strongswan Type : denial of service Remote : No Link : https://security.archlinux.org/AVG-710 Summary ======= The package strongswan before versio...

6.5CVSS0.2AI score0.04009EPSS

Exploits0References5

RedhatCVE•added 2018/05/23 8:19 p.m.•28 views

CVE-2018-5388

An integer underflow has been discovered in strongSwan VPN's charon server, which could lead to a buffer overflow and consequent crash. A local attacker, with enough privileges to access the Unix Domain Socket /var/run/charon.ctl, could use this vulnerability to crash the charon server. Mitigatio...

6.5CVSS2.6AI score0.04009EPSS

Exploits0References1

CNVD•added 2015/06/05 12:0 a.m.•6 views

strongSwan VPN Client DNS Spoofing Vulnerability

strongSwan is an open source IPsec-based VPN solution for Linux maintained by Andreas Steffen, a Swiss software developer. strongSwan VPN Client is one of these VPN clients. A security vulnerability exists in the strongSwan VPN Client. This vulnerability allows attackers to conduct...

2.6CVSS6.6AI score0.02028EPSS

Exploits0References1

OpenVAS•added 2013/11/01 12:0 a.m.•27 views

Debian Security Advisory DSA 2789-1 (strongswan - Denial of service and authorization bypass)

A vulnerability has been found in the ASN.1 parser of strongSwan, an IKE daemon used to establish IPsec protected links. By sending a crafted IDDERASN1DN ID payload to a vulnerable pluto or charon daemon, a malicious remote user can provoke a denial of service daemon crash or an authorization...

5CVSS0.4AI score0.02448EPSS

Exploits0References1