strongSwan 5.2.2 and 5.3.0 allows remote attackers to cause a denial of service (daemon crash) or execute arbitrary code.
oryginał ENCVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HStrongswan
APPStrongswan5.2.25.3.0
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
RCEDoS
CWE
Referencje
Powiązane podatności
CVE-2023-41913CRITICAL9.8PL ✓ten sam produkt
Buffer overflow w strongSwan umożliwiający zdalny RCE bez uwierzytelnienia
CVE-2023-26463CRITICAL9.8ten sam produkt
strongSwan 5.9.8 and 5.9.9 potentially allows remote code execution because it uses a variable named "public" ...
CVE-2021-45079CRITICAL9.1ten sam produkt
In strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early without actually a...
CVE-2022-4967HIGH7.7ten sam produkt
strongSwan versions 5.9.2 through 5.9.5 are affected by authorization bypass through improper validation of ce...
CVE-2022-40617HIGH7.5ten sam produkt
strongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation plugin by sendi...