Lucene search
+L

1549 matches found

OSV
OSV
added 2022/01/24 1:00 p.m.7 views

UBUNTU-CVE-2021-45079

In strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early without actually authenticating the client and in the case of EAP methods with mutual authentication and EAP-only authentication for IKEv2 even without server authentication...

9.1CVSS7.2AI score0.02784EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
added 2022/01/24 1:00 p.m.37 views

CVE-2021-45079

In strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early without actually authenticating the client and in the case of EAP methods with mutual authentication and EAP-only authentication for IKEv2 even without server authentication...

9.1CVSS7.1AI score0.02784EPSS
SaveExploits0References5
OSV
OSV
added 2022/01/24 12:00 a.m.28 views

DSA-5056-1 strongswan - security update

Bulletin has no description...

9.1CVSS9.1AI score0.02784EPSS
SaveExploits0
CNNVD
CNNVD
added 2022/01/24 12:00 a.m.15 views

strongSwan 代码问题漏洞

strongSwan is a Swiss Andreas Steffen personal developer of a Linux platform to use the open source IPsec-based VPN solution. The solution includes authentication mechanisms such as X.509 public key certificates, secure storage of private keys, smart cards, etc. The strongSwan solution has a code...

9.1CVSS7.3AI score0.02784EPSS
SaveExploits0References7
FreeBSD
FreeBSD
added 2021/12/16 12:00 a.m.154 views

strongswan - Incorrect Handling of Early EAP-Success Messages

Strongswan Release Notes reports: Fixed a vulnerability in the EAP client implementation that was caused by incorrectly handling early EAP-Success messages. It may allow to bypass the client and in some scenarios even the server authentication, or could lead to a denial-of-service attack. This...

9.1CVSS2.3AI score0.02784EPSS
SaveExploits0References1
CBLMariner
CBLMariner
added 2021/11/06 12:29 a.m.73 views

CVE-2021-41990 affecting package strongswan 5.7.2-6

CVE-2021-41990 affecting package strongswan 5.7.2-6. A patched version of the package is available...

7.5CVSS7.5AI score0.06651EPSS
SaveExploits0
CBLMariner
CBLMariner
added 2021/11/06 12:29 a.m.43 views

CVE-2021-41991 affecting package strongswan 5.7.2-6

CVE-2021-41991 affecting package strongswan 5.7.2-6. A patched version of the package is available...

7.5CVSS7.5AI score0.05204EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2021/11/01 12:00 a.m.20 views

openSUSE: Security Advisory for strongswan (openSUSE-SU-2021:1399-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7.8AI score0.06651EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2021/11/01 12:00 a.m.35 views

openSUSE 15 Security Update : strongswan (openSUSE-SU-2021:1399-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1399-1 advisory. - The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate with an RSASSA-PSS signature. For...

7.5CVSS8.1AI score0.06651EPSS
SaveExploits0References7
OSV
OSV
added 2021/10/31 2:52 p.m.9 views

OPENSUSE-SU-2021:1399-1 Security update for strongswan

This update for strongswan fixes the following issues: A feature was added: - Add authels plugin to support Marvell FC-SP encryption jscSLE-20151 Security issues fixed: - CVE-2021-41991: Fixed an integer overflow when replacing certificates in cache. bsc1191435 - CVE-2021-41990: Fixed an integer...

7.5CVSS7.6AI score0.06651EPSS
SaveExploits0References5
OPENSUSE Linux
OPENSUSE Linux
added 2021/10/31 12:00 a.m.34 views

Security update for strongswan (important)

openSUSE Security Update: Security update for strongswan Announcement ID: openSUSE-SU-2021:1399-1 Rating: important References: 1191367 1191435 SLE-20151 Cross-References: CVE-2021-41990 CVE-2021-41991 CVSS scores: CVE-2021-41990 SUSE: 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-419...

7.5CVSS7.9AI score0.06651EPSS
SaveExploits0References3
OSV
OSV
added 2021/10/30 11:04 a.m.9 views

OESA-2021-1408 strongswan security update

The strongSwan IPsec implementation supports both the IKEv1 and IKEv2 key exchange protocols in conjunction with the native NETKEY IPsec stack of the Linux kernel. Security Fixes: The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate with an RSASSA-PSS...

7.5CVSS7.6AI score0.06651EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2021/10/30 12:00 a.m.30 views

Fedora: Security Advisory for strongswan (FEDORA-2021-0b37146973)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.7AI score
SaveExploits0References2
OpenVAS
OpenVAS
added 2021/10/30 12:00 a.m.19 views

Fedora: Security Advisory for strongswan (FEDORA-2021-95fab6a482)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.7AI score
SaveExploits0References2
OpenVAS
OpenVAS
added 2021/10/30 12:00 a.m.17 views

Fedora: Security Advisory for strongswan (FEDORA-2021-b3df83339e)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.7AI score
SaveExploits0References2
Fedora
Fedora
added 2021/10/29 11:29 p.m.38 views

[SECURITY] Fedora 35 Update: strongswan-5.9.4-1.fc35

The strongSwan IPsec implementation supports both the IKEv1 and IKEv2 key exchange protocols in conjunction with the native NETKEY IPsec stack of the Linux kernel...

7.5CVSS2AI score0.06651EPSS
SaveExploits0
Fedora
Fedora
added 2021/10/28 7:32 p.m.45 views

[SECURITY] Fedora 34 Update: strongswan-5.9.4-1.fc34

The strongSwan IPsec implementation supports both the IKEv1 and IKEv2 key exchange protocols in conjunction with the native NETKEY IPsec stack of the Linux kernel...

7.5CVSS2AI score0.06651EPSS
SaveExploits0
Photon
Photon
added 2021/10/28 12:00 a.m.47 views

Important Photon OS Security Update - PHSA-2021-3.0-0320

Updates of 'redis', 'strongswan' packages of Photon OS have been released...

9CVSS6.5AI score0.16904EPSS
SaveExploits1
Photon
Photon
added 2021/10/27 12:00 a.m.69 views

Important Photon OS Security Update - PHSA-2021-4.0-0119

Updates of 'redis', 'mysql', 'strongswan' packages of Photon OS have been released...

9CVSS6.6AI score0.16904EPSS
SaveExploits2
Photon
Photon
added 2021/10/27 12:00 a.m.53 views

Important Photon OS Security Update - PHSA-2021-0119

Updates of 'strongswan', 'mysql', 'redis' packages of Photon OS have been released...

9CVSS1.7AI score0.50018EPSS
SaveExploits2
Rows per page
Query Builder