İçeriğe atla
Noroxi

strongSwan kayıtları

strongswan üreticisine ait 49 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
7
Düzeltme kaydı olan
%95,9
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 21
  5. 22
  6. 23
  7. 24
  8. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

49 kayıt
  • CVE-2004-0590
    41Planlayın

    FreeS/WAN 1.x and 2.x, and other related products including superfreeswan 1.x, openswan 1.x before 1.0.6, openswan 2.x before 2.1.4, and str

    KritikCVSS 10,0İstismar yokEPSS %2

    openswan · openswan6 Ara 2004

  • CVE-2015-3991
    40Planlayın

    strongSwan 5.2.2 and 5.3.0 allows remote attackers to cause a denial of service (daemon crash) or execute arbitrary code.

    KritikCVSS 9,8İstismar yokEPSS %4

    strongswan · strongswan7 Eyl 2017

  • CVE-2023-41913
    40Planlayın

    strongSwan before 5.9.12 has a buffer overflow and possible unauthenticated remote code execution via a DH public value that exceeds the int

    KritikCVSS 9,8İstismar yokEPSS %2

    strongswan · strongswan7 Ara 2023

  • CVE-2023-26463
    40Planlayın

    strongSwan 5.9.8 and 5.9.9 potentially allows remote code execution because it uses a variable named "public" for two different purposes wit

    KritikCVSS 9,8İstismar yokEPSS %2

    strongswan · strongswan14 Nis 2023

  • CVE-2021-45079
    37İzleyin

    In strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early without actually authenticating the client and (

    KritikCVSS 9,1İstismar yokEPSS %2

    strongswan · strongswan31 Oca 2022

  • CVE-2026-25998
    34İzleyin

    strongMan vulnerable to private credential recovery due to key and counter reuse

    YüksekCVSS 8,7İstismar yokEPSS %0

    strongswan · strongman19 Şub 2026

  • CVE-2021-41990
    32İzleyin

    The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate with an RSASSA-PSS signature.

    YüksekCVSS 7,5İstismar yokEPSS %6

    strongswan · strongswan18 Eki 2021

  • CVE-2018-10811
    32İzleyin

    strongSwan 5.6.0 and older allows Remote Denial of Service because of Missing Initialization of a Variable.

    YüksekCVSS 7,5İstismar yokEPSS %6

    strongswan · strongswan19 Haz 2018

  • CVE-2021-41991
    32İzleyin

    The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests with different certifi

    YüksekCVSS 7,5İstismar yokEPSS %5

    strongswan · strongswan18 Eki 2021

  • CVE-2010-2628
    31İzleyin

    The IKE daemon in strongSwan 4.3.x before 4.3.7 and 4.4.x before 4.4.1 does not properly check the return values of snprintf calls, which al

    YüksekCVSS 7,5İstismar yokEPSS %4

    strongswan · strongswan20 Ağu 2010

  • CVE-2018-17540
    31İzleyin

    The gmp plugin in strongSwan before 5.7.1 has a Buffer Overflow via a crafted certificate.

    YüksekCVSS 7,5İstismar yokEPSS %3

    strongswan · strongswan3 Eki 2018

  • CVE-2012-2388
    31İzleyin

    The GMP Plugin in strongSwan 4.2.0 through 4.6.3 allows remote attackers to bypass authentication via a (1) empty or (2) zeroed RSA signatur

    YüksekCVSS 7,5İstismar yokEPSS %3

    strongswan · strongswan27 Haz 2012

  • CVE-2017-11185
    31İzleyin

    The gmp plugin in strongSwan before 5.6.0 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) v

    YüksekCVSS 7,5İstismar yokEPSS %2

    strongswan · strongswan18 Ağu 2017

  • CVE-2017-9023
    31İzleyin

    The ASN.1 parser in strongSwan before 5.5.3 improperly handles CHOICE types when the x509 plugin is enabled, which allows remote attackers t

    YüksekCVSS 7,5İstismar yokEPSS %2

    strongswan · strongswan8 Haz 2017

  • CVE-2022-40617
    31İzleyin

    strongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation plugin by sending a crafted end-entity (and i

    YüksekCVSS 7,5İstismar yokEPSS %1

    strongswan · strongswan31 Eki 2022

  • CVE-2018-16152
    31İzleyin

    In verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c in the gmp plugin in strongSwan 4.x and 5.x before 5.7.0, the RSA implementation ba

    YüksekCVSS 7,5İstismar yokEPSS %1

    strongswan · strongswan26 Eyl 2018

  • CVE-2018-16151
    31İzleyin

    In verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c in the gmp plugin in strongSwan 4.x and 5.x before 5.7.0, the RSA implementation ba

    YüksekCVSS 7,5İstismar yokEPSS %1

    strongswan · strongswan26 Eyl 2018

  • CVE-2017-9022
    31İzleyin

    The gmp plugin in strongSwan before 5.5.3 does not properly validate RSA public keys before calling mpz_powm_sec, which allows remote peers

    YüksekCVSS 7,5İstismar yokEPSS %1

    strongswan · strongswan8 Haz 2017

  • CVE-2026-78133
    30İzleyin

    libcharon in strongSwan 6.0.0 through 6.0.7 has a use-after-free in IKEv2 rekeying collision handling.

    YüksekCVSS 7,5İstismar yokEPSS %0

    strongswan · strongswan10 Eyl 2026

  • CVE-2026-78130
    30İzleyin

    strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute certificate parser.

    YüksekCVSS 7,5İstismar yokEPSS %0

    strongswan · strongswan10 Eyl 2026

  • CVE-2026-78132
    30İzleyin

    strongSwan 5.1.3 through 6.0.7 has an infinite loop in the x509 plugin's attribute certificate parser for ietfAttrSyntax.

    YüksekCVSS 7,5İstismar yokEPSS %0

    strongswan · strongswan10 Eyl 2026

  • CVE-2026-78135
    29İzleyin

    libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state machine.

    YüksekCVSS 7,3İstismar yokEPSS %0

    strongswan · strongswan10 Eyl 2026

  • CVE-2026-78134
    28İzleyin

    strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins because there can be a missing or mismatche

    YüksekCVSS 7,1İstismar yokEPSS %0

    strongswan · strongswan10 Eyl 2026

  • CVE-2018-5388
    27İzleyin

    In stroke_socket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer underflow, which may lead to resource exha

    OrtaCVSS 6,5İstismar yokEPSS %3

    strongswan · strongswan31 May 2018

  • CVE-2014-2338
    26İzleyin

    IKEv2 in strongSwan 4.0.7 before 5.1.3 allows remote attackers to bypass authentication by rekeying an IKE_SA during (1) initiation or (2) r

    OrtaCVSS 6,4İstismar yokEPSS %2

    strongswan · strongswan16 Nis 2014