Описание
In the eap-mschapv2 plugin (client-side) in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted message of size 6 through 8, and cause an integer underflow that potentially results in a heap-based buffer overflow.
Ссылки
EPSS
Процентиль: 18%
0.00057
Низкий
8.1 High
CVSS3
Дефекты
CWE-191
Связанные уязвимости
CVSS3: 8.1
ubuntu
22 дня назад
In the eap-mschapv2 plugin (client-side) in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted message of size 6 through 8, and cause an integer underflow that potentially results in a heap-based buffer overflow.
CVSS3: 8.1
debian
22 дня назад
In the eap-mschapv2 plugin (client-side) in strongSwan before 6.0.3, a ...
EPSS
Процентиль: 18%
0.00057
Низкий
8.1 High
CVSS3
Дефекты
CWE-191