CVE-2021-41990

概要

参考情報

• cert-portal.siemens.com/productcert/pdf/ssa-539476.pdf · Third Party Advisory
• strongswan/strongswan release 5.9.4 · Release Notes
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5FJSATD2R2XHTG4P63GCMQ2N7EWKMME5
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WQSQ3BEC22NF4NCDZVCT4P3Q2ZIAJXGJ
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3TQ32JLJOBJDB2EJKSX2PBPB5NFG2D4
• debian.org/security/2021/dsa-4989 · Third Party Advisory
• strongswan.org/blog/2021/10/18/strongswan-vulnerability-%28cve-2021-41990%29.html

strongswan のその他の脆弱性

• CVE-2026-78135高 7.3libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state machine. Because CREATE_CHILD_SA requests are …
• CVE-2026-78134高 7.1strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins because there can be a missing or mismatche…
• CVE-2026-78133高 7.5libcharon in strongSwan 6.0.0 through 6.0.7 has a use-after-free in IKEv2 rekeying collision handling.
• CVE-2026-78132高 7.5strongSwan 5.1.3 through 6.0.7 has an infinite loop in the x509 plugin's attribute certificate parser for ietfAttrSyntax.
• CVE-2026-78131低 3.7strongSwan 4.2.0 through 6.0.7 has a missing release of memory after its effective lifetime in the x509 plugin's attribute certificate parse…