strongSwan 4.5.x through 5.2.x before 5.2.1 allows remote attackers to cause a denial of service (invalid pointer dereference) via a crafted IKEv2 Key Exchange (KE) message with Diffie-Hellman (DH) group 1025.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade strongswan | Jul 30, 2024 | Jan 7, 2015 |
| Suse | — | Upgrade strongswan-nmUpgrade strongswanUpgrade strongswan-docUpgrade strongswan-hmacUpgrade strongswan-libs0Upgrade strongswan-ipsec | Dec 18, 2015 | Jan 7, 2015 |
| Ubuntu | — | Upgrade strongswan-ike | Nov 8, 2024 | Jan 7, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub