| Package | Affected versions | Patched versions |
|---|---|---|
| strongswan | = 4.3.5= 4.3.6= 4.3.7= 4.4.0= 4.4.1= 4.5.0= 4.5.1= 4.5.2= 4.5.3= 4.6.0= 4.6.1= 4.6.2= 4.6.3= 4.6.4= 5.0.0= 5.0.1= 5.0.2 |
strongSwan 4.3.5 through 5.0.3, when using the OpenSSL plugin for ECDSA signature verification, allows remote attackers to authenticate as other users via an invalid signature.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free