strongswan (SUSE:OpenStack Cloud 7) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:OpenStack Cloud 7 package strongswan, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (5)

• CVE-2018-10811 — CVSS 7.5 (high): strongSwan 5.6.0 and older allows Remote Denial of Service because of Missing Initialization of a Variable.
• CVE-2018-16151 — CVSS 7.5 (high): In verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c in the gmp plugin in strongSwan 4.x and 5.x before 5.7.0, the RSA implementation…
• CVE-2018-16152 — CVSS 7.5 (high): In verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c in the gmp plugin in strongSwan 4.x and 5.x before 5.7.0, the RSA implementation…
• CVE-2018-17540 — CVSS 7.5 (high): The gmp plugin in strongSwan before 5.7.1 has a Buffer Overflow via a crafted certificate.
• CVE-2018-5388 — CVSS 6.5 (medium): In stroke_socket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer underflow, which may lead to resource…