CVE-2018-5388CWE-124

In stroke_socket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer underflow, which may lead to resource exhaustion and denial…

published May 31, 2018

CVSS
—
EPSS
4%
Percentile
90.3
In the wild
Unconfirmed
What it is

In stroke_socket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer underflow, which may lead to resource exhaustion and denial of service while reading from the socket.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03917 · 90.3th percentile
Weakness
CWE-124 · Buffer Underwrite ('Buffer Underflow')
Published
2018-05-31T00:00Z
EPSS history
Timeline
  • 31 MAY 00:00Z
    In stroke_socket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer underflow, which may lead to resource exhaustion and denial…
    cvelistv5