[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fZH5Zimqg4RuBZT9INYolRToh9eTgSIoTm-sUAZWgkRA":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":30,"kevVulnerabilities":90,"topProductsByCves":91,"seoMetadata":95,"meta":104},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":29},30525,"strongswan",3,37,0,165,"2024-05-14","s",[16,19,24],{"id":17,"product_name":8,"version_count":18,"cve_count":10,"kev_count":11,"last_cve_update":13},157611,159,{"id":20,"product_name":21,"version_count":22,"cve_count":22,"kev_count":11,"last_cve_update":23},157612,"strongswan_vpn_client",1,"2015-06-10",{"id":25,"product_name":26,"version_count":27,"cve_count":11,"kev_count":11,"last_cve_update":28},157610,"davici",5,null,"Strongswan is a technology vendor with 3 tracked products and 37 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[31,40,45,49,57,63,70,75,80,85],{"cveId":32,"description":33,"publishedDate":34,"cvssScore":35,"cvssVersion":36,"severity":37,"isKev":38,"epssScore":39},"CVE-2021-41990","The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate with an RSASSA-PSS signature. For example, this can be triggered by an unrelated self-signed CA certificate sent by an initiator. Remote code execution cannot occur.","2021-10-18",7.5,"v3.1","High",false,0.06702,{"cveId":41,"description":42,"publishedDate":43,"cvssScore":35,"cvssVersion":36,"severity":37,"isKev":38,"epssScore":44},"CVE-2018-10811","strongSwan 5.6.0 and older allows Remote Denial of Service because of Missing Initialization of a Variable.","2018-06-19",0.06201,{"cveId":46,"description":47,"publishedDate":34,"cvssScore":35,"cvssVersion":36,"severity":37,"isKev":38,"epssScore":48},"CVE-2021-41991","The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests with different certificates to fill the cache and later trigger the replacement of cache entries. The code attempts to select a less-often-used cache entry by means of a random number generator, but this is not done correctly. Remote code execution might be a slight possibility.",0.05301,{"cveId":50,"description":51,"publishedDate":52,"cvssScore":53,"cvssVersion":54,"severity":55,"isKev":38,"epssScore":56},"CVE-2015-3991","strongSwan 5.2.2 and 5.3.0 allows remote attackers to cause a denial of service (daemon crash) or execute arbitrary code.","2017-09-07",9.8,"v3.0","Critical",0.04559,{"cveId":58,"description":59,"publishedDate":60,"cvssScore":35,"cvssVersion":61,"severity":37,"isKev":38,"epssScore":62},"CVE-2010-2628","The IKE daemon in strongSwan 4.3.x before 4.3.7 and 4.4.x before 4.4.1 does not properly check the return values of snprintf calls, which allows remote attackers to execute arbitrary code via crafted (1) certificate or (2) identity data that triggers buffer overflows.","2010-08-20","v2",0.0405,{"cveId":64,"description":65,"publishedDate":66,"cvssScore":67,"cvssVersion":54,"severity":68,"isKev":38,"epssScore":69},"CVE-2018-5388","In stroke_socket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer underflow, which may lead to resource exhaustion and denial of service while reading from the socket.","2018-05-31",6.5,"Medium",0.03917,{"cveId":71,"description":72,"publishedDate":73,"cvssScore":27,"cvssVersion":61,"severity":68,"isKev":38,"epssScore":74},"CVE-2014-9221","strongSwan 4.5.x through 5.2.x before 5.2.1 allows remote attackers to cause a denial of service (invalid pointer dereference) via a crafted IKEv2 Key Exchange (KE) message with Diffie-Hellman (DH) group 1025.","2015-01-07",0.03823,{"cveId":76,"description":77,"publishedDate":78,"cvssScore":35,"cvssVersion":54,"severity":37,"isKev":38,"epssScore":79},"CVE-2018-17540","The gmp plugin in strongSwan before 5.7.1 has a Buffer Overflow via a crafted certificate.","2018-10-03",0.03511,{"cveId":81,"description":82,"publishedDate":83,"cvssScore":35,"cvssVersion":61,"severity":37,"isKev":38,"epssScore":84},"CVE-2012-2388","The GMP Plugin in strongSwan 4.2.0 through 4.6.3 allows remote attackers to bypass authentication via a (1) empty or (2) zeroed RSA signature, aka \"RSA signature verification vulnerability.\"","2012-06-27",0.03284,{"cveId":86,"description":87,"publishedDate":88,"cvssScore":27,"cvssVersion":61,"severity":68,"isKev":38,"epssScore":89},"CVE-2009-0790","The pluto IKE daemon in Openswan and Strongswan IPsec 2.6 before 2.6.21 and 2.4 before 2.4.14, and Strongswan 4.2 before 4.2.14 and 2.8 before 2.8.9, allows remote attackers to cause a denial of service (daemon crash and restart) via a crafted (1) R_U_THERE or (2) R_U_THERE_ACK Dead Peer Detection (DPD) IPsec IKE Notification message that triggers a NULL pointer dereference related to inconsistent ISAKMP state and the lack of a phase2 state association in DPD.","2009-04-01",0.03205,[],[92,93,94],{"id":17,"product_name":8,"version_count":18,"cve_count":10,"kev_count":11,"last_cve_update":13},{"id":20,"product_name":21,"version_count":22,"cve_count":22,"kev_count":11,"last_cve_update":23},{"id":25,"product_name":26,"version_count":27,"cve_count":11,"kev_count":11,"last_cve_update":28},{"title":96,"metaDescription":97,"keywords":98,"structuredData":99},"Strongswan - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Strongswan covering 3 products with 37 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Strongswan vulnerabilities, Strongswan security, Strongswan CVE, Strongswan threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":100,"@type":101,"name":102,"description":97,"url":103},"https:\u002F\u002Fschema.org","Organization","Strongswan","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fstrongswan",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":105,"apiVersion":106},"2026-10-18T22:20:33.195Z","3.0"]