Lucene search

K
osvGoogleOSV:USN-5111-1
HistoryOct 19, 2021 - 10:54 a.m.

strongswan vulnerabilities

2021-10-1910:54:55
Google
osv.dev
5

7.8 High

AI Score

Confidence

High

0.069 Low

EPSS

Percentile

93.9%

It was discovered that strongSwan incorrectly handled certain RSASSA-PSS
signatures. A remote attacker could use this issue to cause strongSwan to
crash, resulting in a denial of service. (CVE-2021-41990)

It was discovered that strongSwan incorrectly handled replacing
certificates in the cache. A remote attacker could use this issue to cause
strongSwan to crash, resulting in a denial of service, or possibly execute
arbitrary code. (CVE-2021-41991)