CVE-2018-10811

Description

References

• lists.opensuse.org/opensuse-security-announce/2019-11/msg00077.html · Broken Link
• lists.opensuse.org/opensuse-security-announce/2019-12/msg00001.html · Broken Link
• lists.opensuse.org/opensuse-security-announce/2020-03/msg00047.html · Broken Link
• download.strongswan.org/security/CVE-2018-10811 · Patch
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UBO6ZQKLB5RY3TV7MXADFTQKXA2LUEIL
• security.gentoo.org/glsa/201811-16 · Third Party Advisory
• usn.ubuntu.com/3771-1 · Third Party Advisory
• debian.org/security/2018/dsa-4229 · Third Party Advisory
• strongswan.org/blog/2018/05/28/strongswan-vulnerability-%28cve-2018-10811%29.html

strongswan의 다른 취약점

• CVE-2026-78135높음 7.3libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state machine. Because CREATE_CHILD_SA requests are …
• CVE-2026-78134높음 7.1strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins because there can be a missing or mismatche…
• CVE-2026-78133높음 7.5libcharon in strongSwan 6.0.0 through 6.0.7 has a use-after-free in IKEv2 rekeying collision handling.
• CVE-2026-78132높음 7.5strongSwan 5.1.3 through 6.0.7 has an infinite loop in the x509 plugin's attribute certificate parser for ietfAttrSyntax.
• CVE-2026-78131낮음 3.7strongSwan 4.2.0 through 6.0.7 has a missing release of memory after its effective lifetime in the x509 plugin's attribute certificate parse…