CVE-2021-41990

The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate with an RSASSA-PSS signature

published October 18, 2021

CVSS
—
EPSS
7%
Percentile
93.9
In the wild
Unconfirmed
What it is

The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate with an RSASSA-PSS signature. For example, this can be triggered by an unrelated self-signed CA certificate sent by an initiator. Remote code execution cannot occur.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06702 · 93.9th percentile
Published
2021-10-18T13:44Z
EPSS history
Timeline
  • 18 OCT 13:44Z
    The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate with an RSASSA-PSS signature
    cvelistv5