PatchFirst · Свежие уязвимости
За последние 30 дней в strongswan опубликовано уязвимостей: 0; в каталоге KEV: 0.
Уязвимостей: 10
In strongSwan before 6.0.7, identity parsing/cloning is mishandled. Parsed EAP-Identities that result in an empty but non-NULL encoding are not correctly cloned and trigger a double-free once the duplicates are destroyed.
Possible NULL-Pointer Dereference in RSA Decryption
Integer Underflow When Handling RADIUS Attributes
NULL-Pointer Dereference When Handling ECDH Public Value in TLS
Accepting Certificates Violating Name Constraints
Integer Underflow When Handling EAP-SIM/AKA Attributes
NULL-Pointer Dereference When Processing Padding in PKCS#7
Infinite Loop When Handling Supported Versions TLS Extension
strongSwan versions 4.5.0 prior to 6.0.5 contain an integer underflow vulnerability in the EAP-TTLS AVP parser that allows unauthenticated remote attackers to cause a denial of service by sending crafted AVP data with invalid length fields during IKEv2 authentication. Attackers can exploit the failure to validate AVP length fields before subtraction to trigger excessive memory allocation or NULL pointer dereference, crashing the charon IKE daemon.
In the eap-mschapv2 plugin (client-side) in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted message of size 6 through 8, and cause an integer underflow that potentially results in a heap-based buffer overflow.
Сопоставьте установленный стек и версии со свежими базами уязвимостей.