Поиск уязвимостей
Количество 11
Количество 11
BDU:2024-07353
Уязвимость плагина revocation VPN-клиента StrongSwan, связанная с неконтролируемым расходом ресурсов, позволяющая нарушителю вызвать отказ в обслуживании
ALT-PU-2022-3129
ALT-PU-2022-3129: package `strongswan` update to version 5.9.8-alt1
ALT-PU-2022-2731
ALT-PU-2022-2731: package `strongswan` update to version 5.9.8-alt1
CVE-2022-40617
strongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation plugin by sending a crafted end-entity (and intermediate CA) certificate that contains a CRL/OCSP URL that points to a server (under the attacker's control) that doesn't properly respond but (for example) just does nothing after the initial TCP handshake, or sends an excessive amount of application data.
CVE-2022-40617
strongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation plugin by sending a crafted end-entity (and intermediate CA) certificate that contains a CRL/OCSP URL that points to a server (under the attacker's control) that doesn't properly respond but (for example) just does nothing after the initial TCP handshake, or sends an excessive amount of application data.
CVE-2022-40617
strongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation plugin by sending a crafted end-entity (and intermediate CA) certificate that contains a CRL/OCSP URL that points to a server (under the attacker's control) that doesn't properly respond but (for example) just does nothing after the initial TCP handshake or sends an excessive amount of application data.
CVE-2022-40617
strongSwan before 5.9.8 allows remote attackers to cause a denial of s ...
SUSE-SU-2022:4197-1
Security update for strongswan
SUSE-SU-2022:4185-1
Security update for strongswan
SUSE-SU-2022:4159-1
Security update for strongswan
GHSA-f2x8-4jwf-gqrg
strongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation plugin by sending a crafted end-entity (and intermediate CA) certificate that contains a CRL/OCSP URL that points to a server (under the attacker's control) that doesn't properly respond but (for example) just does nothing after the initial TCP handshake, or sends an excessive amount of application data.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2024-07353 Уязвимость плагина revocation VPN-клиента StrongSwan, связанная с неконтролируемым расходом ресурсов, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 2% Низкий | около 4 лет назад |
| ALT-PU-2022-3129 ALT-PU-2022-3129: package `strongswan` update to version 5.9.8-alt1 | CVSS3: 7.5 | 2% Низкий | почти 4 года назад |
| ALT-PU-2022-2731 ALT-PU-2022-2731: package `strongswan` update to version 5.9.8-alt1 | CVSS3: 7.5 | 2% Низкий | около 4 лет назад |
 | CVE-2022-40617 strongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation plugin by sending a crafted end-entity (and intermediate CA) certificate that contains a CRL/OCSP URL that points to a server (under the attacker's control) that doesn't properly respond but (for example) just does nothing after the initial TCP handshake, or sends an excessive amount of application data. | CVSS3: 7.5 | 2% Низкий | около 4 лет назад |
 | CVE-2022-40617 strongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation plugin by sending a crafted end-entity (and intermediate CA) certificate that contains a CRL/OCSP URL that points to a server (under the attacker's control) that doesn't properly respond but (for example) just does nothing after the initial TCP handshake, or sends an excessive amount of application data. | CVSS3: 7.5 | 2% Низкий | около 4 лет назад |
 | CVE-2022-40617 strongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation plugin by sending a crafted end-entity (and intermediate CA) certificate that contains a CRL/OCSP URL that points to a server (under the attacker's control) that doesn't properly respond but (for example) just does nothing after the initial TCP handshake or sends an excessive amount of application data. | CVSS3: 7.5 | 2% Низкий | около 4 лет назад |
| CVE-2022-40617 strongSwan before 5.9.8 allows remote attackers to cause a denial of s ... | CVSS3: 7.5 | 2% Низкий | около 4 лет назад |
 | SUSE-SU-2022:4197-1 Security update for strongswan | 2% Низкий | почти 4 года назад | |
| SUSE-SU-2022:4185-1 Security update for strongswan | 2% Низкий | почти 4 года назад | |
| SUSE-SU-2022:4159-1 Security update for strongswan | 2% Низкий | почти 4 года назад | |
| GHSA-f2x8-4jwf-gqrg strongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation plugin by sending a crafted end-entity (and intermediate CA) certificate that contains a CRL/OCSP URL that points to a server (under the attacker's control) that doesn't properly respond but (for example) just does nothing after the initial TCP handshake, or sends an excessive amount of application data. | CVSS3: 7.5 | 2% Низкий | около 4 лет назад |
Уязвимостей на страницу