Логотип exploitDog
bind:CVE-2021-41991
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2021-41991

Количество 13

Количество 13

ubuntu логотип

CVE-2021-41991

больше 4 лет назад

The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests with different certificates to fill the cache and later trigger the replacement of cache entries. The code attempts to select a less-often-used cache entry by means of a random number generator, but this is not done correctly. Remote code execution might be a slight possibility.

CVSS3: 7.5
EPSS: Низкий
redhat логотип

CVE-2021-41991

больше 4 лет назад

The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests with different certificates to fill the cache and later trigger the replacement of cache entries. The code attempts to select a less-often-used cache entry by means of a random number generator, but this is not done correctly. Remote code execution might be a slight possibility.

CVSS3: 7.5
EPSS: Низкий
nvd логотип

CVE-2021-41991

больше 4 лет назад

The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests with different certificates to fill the cache and later trigger the replacement of cache entries. The code attempts to select a less-often-used cache entry by means of a random number generator, but this is not done correctly. Remote code execution might be a slight possibility.

CVSS3: 7.5
EPSS: Низкий
msrc логотип

CVE-2021-41991

больше 4 лет назад

The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests with different certificates to fill the cache and later trigger the replacement of cache entries. The code attempts to select a less-often-used cache entry by means of a random number generator but this is not done correctly. Remote code execution might be a slight possibility.

CVSS3: 7.5
EPSS: Низкий
debian логотип

CVE-2021-41991

больше 4 лет назад

The in-memory certificate cache in strongSwan before 5.9.4 has a remot ...

CVSS3: 7.5
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2021:3468-1

больше 4 лет назад

Security update for strongswan

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2021:14827-1

больше 4 лет назад

Security update for strongswan

EPSS: Низкий
github логотип

GHSA-jpr7-w98h-cvgm

больше 3 лет назад

The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests with different certificates to fill the cache and later trigger the replacement of cache entries. The code attempts to select a less-often-used cache entry by means of a random number generator, but this is not done correctly. Remote code execution might be a slight possibility.

CVSS3: 7.5
EPSS: Низкий
fstec логотип

BDU:2023-02802

больше 4 лет назад

Уязвимость демона strongSwan, вызванная целочисленным переполнением (при условии, что кэш сертификатов в памяти полон), позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 7.5
EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2021:3467-1

больше 4 лет назад

Security update for strongswan

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2021:1399-1

больше 4 лет назад

Security update for strongswan

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2021:3469-1

больше 4 лет назад

Security update for strongswan

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2021:3467-1

больше 4 лет назад

Security update for strongswan

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2021-41991

The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests with different certificates to fill the cache and later trigger the replacement of cache entries. The code attempts to select a less-often-used cache entry by means of a random number generator, but this is not done correctly. Remote code execution might be a slight possibility.

CVSS3: 7.5
2%
Низкий
больше 4 лет назад
redhat логотип
CVE-2021-41991

The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests with different certificates to fill the cache and later trigger the replacement of cache entries. The code attempts to select a less-often-used cache entry by means of a random number generator, but this is not done correctly. Remote code execution might be a slight possibility.

CVSS3: 7.5
2%
Низкий
больше 4 лет назад
nvd логотип
CVE-2021-41991

The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests with different certificates to fill the cache and later trigger the replacement of cache entries. The code attempts to select a less-often-used cache entry by means of a random number generator, but this is not done correctly. Remote code execution might be a slight possibility.

CVSS3: 7.5
2%
Низкий
больше 4 лет назад
msrc логотип
CVE-2021-41991

The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests with different certificates to fill the cache and later trigger the replacement of cache entries. The code attempts to select a less-often-used cache entry by means of a random number generator but this is not done correctly. Remote code execution might be a slight possibility.

CVSS3: 7.5
2%
Низкий
больше 4 лет назад
debian логотип
CVE-2021-41991

The in-memory certificate cache in strongSwan before 5.9.4 has a remot ...

CVSS3: 7.5
2%
Низкий
больше 4 лет назад
suse-cvrf логотип
SUSE-SU-2021:3468-1

Security update for strongswan

2%
Низкий
больше 4 лет назад
suse-cvrf логотип
SUSE-SU-2021:14827-1

Security update for strongswan

2%
Низкий
больше 4 лет назад
github логотип
GHSA-jpr7-w98h-cvgm

The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests with different certificates to fill the cache and later trigger the replacement of cache entries. The code attempts to select a less-often-used cache entry by means of a random number generator, but this is not done correctly. Remote code execution might be a slight possibility.

CVSS3: 7.5
2%
Низкий
больше 3 лет назад
fstec логотип
BDU:2023-02802

Уязвимость демона strongSwan, вызванная целочисленным переполнением (при условии, что кэш сертификатов в памяти полон), позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 7.5
2%
Низкий
больше 4 лет назад
suse-cvrf логотип
openSUSE-SU-2021:3467-1

Security update for strongswan

больше 4 лет назад
suse-cvrf логотип
openSUSE-SU-2021:1399-1

Security update for strongswan

больше 4 лет назад
suse-cvrf логотип
SUSE-SU-2021:3469-1

Security update for strongswan

больше 4 лет назад
suse-cvrf логотип
SUSE-SU-2021:3467-1

Security update for strongswan

больше 4 лет назад

Уязвимостей на страницу