CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-41991

The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests with different certificates to fill the cache and later trigger the replacement of cache entries. The code attempts to select a less-often-used cache entry by means of a random number generator, but this is not done correctly. Remote code execution might be a slight possibility.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.019

EPSS Ranking 82.6%

CVSS Severity

CVSS v3 Score 7.5

CVSS v2 Score 5.0

References

Products affected by CVE-2021-41991

Siemens » Sinema Remote Connect Server » Version: N/A

cpe:2.3:a:siemens:sinema_remote_connect_server:-
Strongswan » Strongswan » Version: 4.2.10

cpe:2.3:a:strongswan:strongswan:4.2.10
Strongswan » Strongswan » Version: 4.2.11

cpe:2.3:a:strongswan:strongswan:4.2.11
Strongswan » Strongswan » Version: 4.2.12

cpe:2.3:a:strongswan:strongswan:4.2.12
Strongswan » Strongswan » Version: 4.2.13

cpe:2.3:a:strongswan:strongswan:4.2.13
Strongswan » Strongswan » Version: 4.2.14

cpe:2.3:a:strongswan:strongswan:4.2.14
Strongswan » Strongswan » Version: 4.2.15

cpe:2.3:a:strongswan:strongswan:4.2.15
Strongswan » Strongswan » Version: 4.2.16

cpe:2.3:a:strongswan:strongswan:4.2.16
Strongswan » Strongswan » Version: 4.3.0

cpe:2.3:a:strongswan:strongswan:4.3.0
Strongswan » Strongswan » Version: 4.3.1

cpe:2.3:a:strongswan:strongswan:4.3.1
Strongswan » Strongswan » Version: 4.3.2

cpe:2.3:a:strongswan:strongswan:4.3.2
Strongswan » Strongswan » Version: 4.3.3

cpe:2.3:a:strongswan:strongswan:4.3.3
Strongswan » Strongswan » Version: 4.3.4

cpe:2.3:a:strongswan:strongswan:4.3.4
Strongswan » Strongswan » Version: 4.3.5

cpe:2.3:a:strongswan:strongswan:4.3.5
Strongswan » Strongswan » Version: 4.3.6

cpe:2.3:a:strongswan:strongswan:4.3.6
Strongswan » Strongswan » Version: 4.3.7

cpe:2.3:a:strongswan:strongswan:4.3.7
Strongswan » Strongswan » Version: 4.4.0

cpe:2.3:a:strongswan:strongswan:4.4.0
Strongswan » Strongswan » Version: 4.4.1

cpe:2.3:a:strongswan:strongswan:4.4.1
Strongswan » Strongswan » Version: 4.5.0

cpe:2.3:a:strongswan:strongswan:4.5.0
Strongswan » Strongswan » Version: 4.5.1

cpe:2.3:a:strongswan:strongswan:4.5.1
Strongswan » Strongswan » Version: 4.5.2

cpe:2.3:a:strongswan:strongswan:4.5.2
Strongswan » Strongswan » Version: 4.5.3

cpe:2.3:a:strongswan:strongswan:4.5.3
Strongswan » Strongswan » Version: 4.6.0

cpe:2.3:a:strongswan:strongswan:4.6.0
Strongswan » Strongswan » Version: 4.6.1

cpe:2.3:a:strongswan:strongswan:4.6.1
Strongswan » Strongswan » Version: 4.6.2

cpe:2.3:a:strongswan:strongswan:4.6.2
Strongswan » Strongswan » Version: 4.6.3

cpe:2.3:a:strongswan:strongswan:4.6.3
Strongswan » Strongswan » Version: 4.6.4

cpe:2.3:a:strongswan:strongswan:4.6.4
Strongswan » Strongswan » Version: 5.0.0

cpe:2.3:a:strongswan:strongswan:5.0.0
Strongswan » Strongswan » Version: 5.0.1

cpe:2.3:a:strongswan:strongswan:5.0.1
Strongswan » Strongswan » Version: 5.0.2

cpe:2.3:a:strongswan:strongswan:5.0.2
Strongswan » Strongswan » Version: 5.0.3

cpe:2.3:a:strongswan:strongswan:5.0.3
Strongswan » Strongswan » Version: 5.0.4

cpe:2.3:a:strongswan:strongswan:5.0.4
Strongswan » Strongswan » Version: 5.1.0

cpe:2.3:a:strongswan:strongswan:5.1.0
Strongswan » Strongswan » Version: 5.1.1

cpe:2.3:a:strongswan:strongswan:5.1.1
Strongswan » Strongswan » Version: 5.1.2

cpe:2.3:a:strongswan:strongswan:5.1.2
Strongswan » Strongswan » Version: 5.1.3

cpe:2.3:a:strongswan:strongswan:5.1.3
Strongswan » Strongswan » Version: 5.2.0

cpe:2.3:a:strongswan:strongswan:5.2.0
Strongswan » Strongswan » Version: 5.2.1

cpe:2.3:a:strongswan:strongswan:5.2.1
Strongswan » Strongswan » Version: 5.2.2

cpe:2.3:a:strongswan:strongswan:5.2.2
Strongswan » Strongswan » Version: 5.2.3

cpe:2.3:a:strongswan:strongswan:5.2.3
Strongswan » Strongswan » Version: 5.3.0

cpe:2.3:a:strongswan:strongswan:5.3.0
Strongswan » Strongswan » Version: 5.3.1

cpe:2.3:a:strongswan:strongswan:5.3.1
Strongswan » Strongswan » Version: 5.3.2

cpe:2.3:a:strongswan:strongswan:5.3.2
Strongswan » Strongswan » Version: 5.3.3

cpe:2.3:a:strongswan:strongswan:5.3.3
Strongswan » Strongswan » Version: 5.3.4

cpe:2.3:a:strongswan:strongswan:5.3.4
Strongswan » Strongswan » Version: 5.3.5

cpe:2.3:a:strongswan:strongswan:5.3.5
Strongswan » Strongswan » Version: 5.4.0

cpe:2.3:a:strongswan:strongswan:5.4.0
Strongswan » Strongswan » Version: 5.5.0

cpe:2.3:a:strongswan:strongswan:5.5.0
Strongswan » Strongswan » Version: 5.5.1

cpe:2.3:a:strongswan:strongswan:5.5.1
Strongswan » Strongswan » Version: 5.5.2

cpe:2.3:a:strongswan:strongswan:5.5.2
Strongswan » Strongswan » Version: 5.5.3

cpe:2.3:a:strongswan:strongswan:5.5.3
Strongswan » Strongswan » Version: 5.6.0

cpe:2.3:a:strongswan:strongswan:5.6.0
Strongswan » Strongswan » Version: 5.6.1

cpe:2.3:a:strongswan:strongswan:5.6.1
Strongswan » Strongswan » Version: 5.6.2

cpe:2.3:a:strongswan:strongswan:5.6.2
Strongswan » Strongswan » Version: 5.6.3

cpe:2.3:a:strongswan:strongswan:5.6.3
Strongswan » Strongswan » Version: 5.7.0

cpe:2.3:a:strongswan:strongswan:5.7.0
Strongswan » Strongswan » Version: 5.7.1

cpe:2.3:a:strongswan:strongswan:5.7.1
Strongswan » Strongswan » Version: 5.7.2

cpe:2.3:a:strongswan:strongswan:5.7.2
Strongswan » Strongswan » Version: 5.8.2

cpe:2.3:a:strongswan:strongswan:5.8.2
Strongswan » Strongswan » Version: 5.9.0

cpe:2.3:a:strongswan:strongswan:5.9.0
Strongswan » Strongswan » Version: 5.9.1

cpe:2.3:a:strongswan:strongswan:5.9.1
Strongswan » Strongswan » Version: 5.9.2

cpe:2.3:a:strongswan:strongswan:5.9.2
Strongswan » Strongswan » Version: 5.9.3

cpe:2.3:a:strongswan:strongswan:5.9.3
Siemens » Cp 1543-1 » Version: N/A

cpe:2.3:h:siemens:cp_1543-1:-
Siemens » Scalance Sc622-2c » Version: N/A

cpe:2.3:h:siemens:scalance_sc622-2c:-
Siemens » Scalance Sc632-2c » Version: N/A

cpe:2.3:h:siemens:scalance_sc632-2c:-
Siemens » Scalance Sc636-2c » Version: N/A

cpe:2.3:h:siemens:scalance_sc636-2c:-
Siemens » Scalance Sc642-2c » Version: N/A

cpe:2.3:h:siemens:scalance_sc642-2c:-
Siemens » Scalance Sc646-2c » Version: N/A

cpe:2.3:h:siemens:scalance_sc646-2c:-
Siemens » Simatic Cp 1242-7 Gprs V2 » Version: N/A

cpe:2.3:h:siemens:simatic_cp_1242-7_gprs_v2:-
Siemens » Simatic Cp 1243-1 » Version: N/A

cpe:2.3:h:siemens:simatic_cp_1243-1:-
Siemens » Simatic Cp 1243-7 Lte/us » Version: N/A

cpe:2.3:h:siemens:simatic_cp_1243-7_lte/us:-
Siemens » Simatic Cp 1542sp-1 » Version: N/A

cpe:2.3:h:siemens:simatic_cp_1542sp-1:-
Siemens » Simatic Cp 1542sp-1 Irc » Version: N/A

cpe:2.3:h:siemens:simatic_cp_1542sp-1_irc:-
Siemens » Simatic Cp 1543sp-1 » Version: N/A

cpe:2.3:h:siemens:simatic_cp_1543sp-1:-
Siemens » Simatic Net Cp1243-7 Lte Eu » Version: N/A

cpe:2.3:h:siemens:simatic_net_cp1243-7_lte_eu:-
Siemens » Simatic Net Cp 1243-8 Irc » Version: N/A

cpe:2.3:h:siemens:simatic_net_cp_1243-8_irc:-
Siemens » Simatic Net Cp 1545-1 » Version: N/A

cpe:2.3:h:siemens:simatic_net_cp_1545-1:-
Siemens » Siplus Et 200sp Cp 1542sp-1 Irc Tx Rail » Version: N/A

cpe:2.3:h:siemens:siplus_et_200sp_cp_1542sp-1_irc_tx_rail:-
Siemens » Siplus Et 200sp Cp 1543sp-1 Isec » Version: N/A

cpe:2.3:h:siemens:siplus_et_200sp_cp_1543sp-1_isec:-
Siemens » Siplus Et 200sp Cp 1543sp-1 Isec Tx Rail » Version: N/A

cpe:2.3:h:siemens:siplus_et_200sp_cp_1543sp-1_isec_tx_rail:-
Siemens » Siplus Net Cp 1543-1 » Version: N/A

cpe:2.3:h:siemens:siplus_net_cp_1543-1:-
Siemens » Siplus S7-1200 Cp 1243-1 » Version: N/A

cpe:2.3:h:siemens:siplus_s7-1200_cp_1243-1:-
Siemens » Siplus S7-1200 Cp 1243-1 Rail » Version: N/A

cpe:2.3:h:siemens:siplus_s7-1200_cp_1243-1_rail:-
Debian » Debian Linux » Version: 10.0

cpe:2.3:o:debian:debian_linux:10.0
Debian » Debian Linux » Version: 11.0

cpe:2.3:o:debian:debian_linux:11.0
Debian » Debian Linux » Version: 9.0

cpe:2.3:o:debian:debian_linux:9.0
Fedoraproject » Fedora » Version: 33

cpe:2.3:o:fedoraproject:fedora:33
Fedoraproject » Fedora » Version: 34

cpe:2.3:o:fedoraproject:fedora:34
Fedoraproject » Fedora » Version: 35

cpe:2.3:o:fedoraproject:fedora:35
Siemens » Cp 1543-1 Firmware » Version: N/A

cpe:2.3:o:siemens:cp_1543-1_firmware:-
Siemens » Scalance Sc622-2c Firmware » Version: N/A

cpe:2.3:o:siemens:scalance_sc622-2c_firmware:-
Siemens » Scalance Sc632-2c Firmware » Version: N/A

cpe:2.3:o:siemens:scalance_sc632-2c_firmware:-
Siemens » Scalance Sc636-2c Firmware » Version: N/A

cpe:2.3:o:siemens:scalance_sc636-2c_firmware:-
Siemens » Scalance Sc642-2c Firmware » Version: N/A

cpe:2.3:o:siemens:scalance_sc642-2c_firmware:-
Siemens » Scalance Sc646-2c Firmware » Version: N/A

cpe:2.3:o:siemens:scalance_sc646-2c_firmware:-
Siemens » Simatic Cp 1242-7 Gprs V2 Firmware » Version: N/A

cpe:2.3:o:siemens:simatic_cp_1242-7_gprs_v2_firmware:-
Siemens » Simatic Cp 1243-1 Firmware » Version: N/A

cpe:2.3:o:siemens:simatic_cp_1243-1_firmware:-
Siemens » Simatic Cp 1243-7 Lte/us Firmware » Version: N/A

cpe:2.3:o:siemens:simatic_cp_1243-7_lte/us_firmware:-
Siemens » Simatic Cp 1542sp-1 Firmware » Version: N/A

cpe:2.3:o:siemens:simatic_cp_1542sp-1_firmware:-
Siemens » Simatic Cp 1542sp-1 Irc Firmware » Version: N/A

cpe:2.3:o:siemens:simatic_cp_1542sp-1_irc_firmware:-
Siemens » Simatic Cp 1543sp-1 Firmware » Version: N/A

cpe:2.3:o:siemens:simatic_cp_1543sp-1_firmware:-
Siemens » Simatic Net Cp1243-7 Lte Eu Firmware » Version: N/A

cpe:2.3:o:siemens:simatic_net_cp1243-7_lte_eu_firmware:-
Siemens » Simatic Net Cp 1243-8 Irc Firmware » Version: N/A

cpe:2.3:o:siemens:simatic_net_cp_1243-8_irc_firmware:-
Siemens » Simatic Net Cp 1545-1 Firmware » Version: N/A

cpe:2.3:o:siemens:simatic_net_cp_1545-1_firmware:-
Siemens » Siplus Et 200sp Cp 1542sp-1 Irc Tx Rail Firmware » Version: N/A

cpe:2.3:o:siemens:siplus_et_200sp_cp_1542sp-1_irc_tx_rail_firmware:-
Siemens » Siplus Et 200sp Cp 1543sp-1 Isec Firmware » Version: N/A

cpe:2.3:o:siemens:siplus_et_200sp_cp_1543sp-1_isec_firmware:-
Siemens » Siplus Et 200sp Cp 1543sp-1 Isec Tx Rail Firmware » Version: N/A

cpe:2.3:o:siemens:siplus_et_200sp_cp_1543sp-1_isec_tx_rail_firmware:-
Siemens » Siplus Net Cp 1543-1 Firmware » Version: N/A

cpe:2.3:o:siemens:siplus_net_cp_1543-1_firmware:-
Siemens » Siplus S7-1200 Cp 1243-1 Firmware » Version: N/A

cpe:2.3:o:siemens:siplus_s7-1200_cp_1243-1_firmware:-
Siemens » Siplus S7-1200 Cp 1243-1 Rail Firmware » Version: N/A

cpe:2.3:o:siemens:siplus_s7-1200_cp_1243-1_rail_firmware:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-41991

Products

Pricing

Contact Us