Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests with different certificates to fill the cache and later trigger the replacement of cache entries. The code attempts to select a less-often-used cache entry by means of a random number generator, but this is not done correctly. Remote code execution might be a slight possibility.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
strongSwan 输入验证错误漏洞
Vulnerability Description
strongSwan是瑞士Andreas Steffen个人开发者的一套Linux平台使用的开源的基于IPsec的VPN解决方案。该方案包含X.509公开密钥证书、安全储存私钥、智能卡等认证机制。 StrongSwan 中存在输入验证错误漏洞，该漏洞源于产品使用随机数生成器生成缓存条数。攻击者可通过多个请求填充缓存并替换缓存导致服务错误或远程代码执行。以下产品及版本受到影响：StrongSwan 5.9.4 之前版本。
CVSS Information
N/A
Vulnerability Type
N/A