CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-41990

The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate with an RSASSA-PSS signature. For example, this can be triggered by an unrelated self-signed CA certificate sent by an initiator. Remote code execution cannot occur.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.027

EPSS Ranking 85.0%

CVSS Severity

CVSS v3 Score 7.5

CVSS v2 Score 5.0

References

Products affected by CVE-2021-41990

Strongswan » Strongswan » Version: 5.6.1

cpe:2.3:a:strongswan:strongswan:5.6.1
Strongswan » Strongswan » Version: 5.6.2

cpe:2.3:a:strongswan:strongswan:5.6.2
Strongswan » Strongswan » Version: 5.6.3

cpe:2.3:a:strongswan:strongswan:5.6.3
Strongswan » Strongswan » Version: 5.7.0

cpe:2.3:a:strongswan:strongswan:5.7.0
Strongswan » Strongswan » Version: 5.7.1

cpe:2.3:a:strongswan:strongswan:5.7.1
Strongswan » Strongswan » Version: 5.7.2

cpe:2.3:a:strongswan:strongswan:5.7.2
Strongswan » Strongswan » Version: 5.8.2

cpe:2.3:a:strongswan:strongswan:5.8.2
Strongswan » Strongswan » Version: 5.9.0

cpe:2.3:a:strongswan:strongswan:5.9.0
Strongswan » Strongswan » Version: 5.9.1

cpe:2.3:a:strongswan:strongswan:5.9.1
Strongswan » Strongswan » Version: 5.9.2

cpe:2.3:a:strongswan:strongswan:5.9.2
Strongswan » Strongswan » Version: 5.9.3

cpe:2.3:a:strongswan:strongswan:5.9.3
Siemens » 6gk5615-0aa00-2aa2 » Version: N/A

cpe:2.3:h:siemens:6gk5615-0aa00-2aa2:-
Siemens » 6gk5804-0ap00-2aa2 » Version: N/A

cpe:2.3:h:siemens:6gk5804-0ap00-2aa2:-
Siemens » 6gk5812-1aa00-2aa2 » Version: N/A

cpe:2.3:h:siemens:6gk5812-1aa00-2aa2:-
Siemens » 6gk5812-1ba00-2aa2 » Version: N/A

cpe:2.3:h:siemens:6gk5812-1ba00-2aa2:-
Siemens » 6gk5816-1aa00-2aa2 » Version: N/A

cpe:2.3:h:siemens:6gk5816-1aa00-2aa2:-
Siemens » 6gk5816-1ba00-2aa2 » Version: N/A

cpe:2.3:h:siemens:6gk5816-1ba00-2aa2:-
Siemens » 6gk5826-2ab00-2ab2 » Version: N/A

cpe:2.3:h:siemens:6gk5826-2ab00-2ab2:-
Siemens » 6gk5856-2ea00-3aa1 » Version: N/A

cpe:2.3:h:siemens:6gk5856-2ea00-3aa1:-
Siemens » 6gk5856-2ea00-3da1 » Version: N/A

cpe:2.3:h:siemens:6gk5856-2ea00-3da1:-
Siemens » 6gk5874-2aa00-2aa2 » Version: N/A

cpe:2.3:h:siemens:6gk5874-2aa00-2aa2:-
Siemens » 6gk5874-3aa00-2aa2 » Version: N/A

cpe:2.3:h:siemens:6gk5874-3aa00-2aa2:-
Siemens » 6gk5876-3aa02-2ba2 » Version: N/A

cpe:2.3:h:siemens:6gk5876-3aa02-2ba2:-
Siemens » 6gk5876-3aa02-2ea2 » Version: N/A

cpe:2.3:h:siemens:6gk5876-3aa02-2ea2:-
Siemens » 6gk5876-4aa00-2ba2 » Version: N/A

cpe:2.3:h:siemens:6gk5876-4aa00-2ba2:-
Siemens » 6gk5876-4aa00-2da2 » Version: N/A

cpe:2.3:h:siemens:6gk5876-4aa00-2da2:-
Siemens » 6gk6108-4am00-2ba2 » Version: N/A

cpe:2.3:h:siemens:6gk6108-4am00-2ba2:-
Siemens » 6gk6108-4am00-2da2 » Version: N/A

cpe:2.3:h:siemens:6gk6108-4am00-2da2:-
Debian » Debian Linux » Version: 10.0

cpe:2.3:o:debian:debian_linux:10.0
Debian » Debian Linux » Version: 11.0

cpe:2.3:o:debian:debian_linux:11.0
Fedoraproject » Fedora » Version: 33

cpe:2.3:o:fedoraproject:fedora:33
Fedoraproject » Fedora » Version: 34

cpe:2.3:o:fedoraproject:fedora:34
Fedoraproject » Fedora » Version: 35

cpe:2.3:o:fedoraproject:fedora:35
Siemens » 6gk5615-0aa00-2aa2 Firmware » Version: N/A

cpe:2.3:o:siemens:6gk5615-0aa00-2aa2_firmware:-
Siemens » 6gk5804-0ap00-2aa2 Firmware » Version: N/A

cpe:2.3:o:siemens:6gk5804-0ap00-2aa2_firmware:-
Siemens » 6gk5812-1aa00-2aa2 Firmware » Version: N/A

cpe:2.3:o:siemens:6gk5812-1aa00-2aa2_firmware:-
Siemens » 6gk5812-1ba00-2aa2 Firmware » Version: N/A

cpe:2.3:o:siemens:6gk5812-1ba00-2aa2_firmware:-
Siemens » 6gk5816-1aa00-2aa2 Firmware » Version: N/A

cpe:2.3:o:siemens:6gk5816-1aa00-2aa2_firmware:-
Siemens » 6gk5816-1ba00-2aa2 Firmware » Version: N/A

cpe:2.3:o:siemens:6gk5816-1ba00-2aa2_firmware:-
Siemens » 6gk5826-2ab00-2ab2 Firmware » Version: N/A

cpe:2.3:o:siemens:6gk5826-2ab00-2ab2_firmware:-
Siemens » 6gk5856-2ea00-3aa1 Firmware » Version: N/A

cpe:2.3:o:siemens:6gk5856-2ea00-3aa1_firmware:-
Siemens » 6gk5856-2ea00-3da1 Firmware » Version: N/A

cpe:2.3:o:siemens:6gk5856-2ea00-3da1_firmware:-
Siemens » 6gk5874-2aa00-2aa2 Firmware » Version: N/A

cpe:2.3:o:siemens:6gk5874-2aa00-2aa2_firmware:-
Siemens » 6gk5874-3aa00-2aa2 Firmware » Version: N/A

cpe:2.3:o:siemens:6gk5874-3aa00-2aa2_firmware:-
Siemens » 6gk5876-3aa02-2ba2 Firmware » Version: N/A

cpe:2.3:o:siemens:6gk5876-3aa02-2ba2_firmware:-
Siemens » 6gk5876-3aa02-2ea2 Firmware » Version: N/A

cpe:2.3:o:siemens:6gk5876-3aa02-2ea2_firmware:-
Siemens » 6gk5876-4aa00-2ba2 Firmware » Version: N/A

cpe:2.3:o:siemens:6gk5876-4aa00-2ba2_firmware:-
Siemens » 6gk5876-4aa00-2da2 Firmware » Version: N/A

cpe:2.3:o:siemens:6gk5876-4aa00-2da2_firmware:-
Siemens » 6gk6108-4am00-2ba2 Firmware » Version: N/A

cpe:2.3:o:siemens:6gk6108-4am00-2ba2_firmware:-
Siemens » 6gk6108-4am00-2da2 Firmware » Version: N/A

cpe:2.3:o:siemens:6gk6108-4am00-2da2_firmware:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-41990

Products

Pricing

Contact Us