strongswan (SUSE:Linux Enterprise Server for SAP Applications 12 SP2) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Server for SAP Applications 12 SP2 package strongswan, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (8)

• CVE-2017-11185 — CVSS 7.5 (high): The gmp plugin in strongSwan before 5.6.0 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash)…
• CVE-2017-9022 — CVSS 7.5 (high): The gmp plugin in strongSwan before 5.5.3 does not properly validate RSA public keys before calling mpz_powm_sec, which allows remote peers…
• CVE-2017-9023 — CVSS 7.5 (high): The ASN.1 parser in strongSwan before 5.5.3 improperly handles CHOICE types when the x509 plugin is enabled, which allows remote attackers…
• CVE-2018-10811 — CVSS 7.5 (high): strongSwan 5.6.0 and older allows Remote Denial of Service because of Missing Initialization of a Variable.
• CVE-2018-16151 — CVSS 7.5 (high): In verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c in the gmp plugin in strongSwan 4.x and 5.x before 5.7.0, the RSA implementation…
• CVE-2018-16152 — CVSS 7.5 (high): In verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c in the gmp plugin in strongSwan 4.x and 5.x before 5.7.0, the RSA implementation…
• CVE-2018-17540 — CVSS 7.5 (high): The gmp plugin in strongSwan before 5.7.1 has a Buffer Overflow via a crafted certificate.
• CVE-2018-5388 — CVSS 6.5 (medium): In stroke_socket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer underflow, which may lead to resource…