Search CVE reports
1671 – 1680 of 58463 results
libcharon in strongSwan 6.0.0 through 6.0.7 has a use-after-free in IKEv2 rekeying collision handling.
1 affected package
strongswan
| Package | 16.04 LTS |
|---|---|
| strongswan | Not affected |
strongSwan 5.1.3 through 6.0.7 has an infinite loop in the x509 plugin's attribute certificate parser for ietfAttrSyntax.
1 affected package
strongswan
| Package | 16.04 LTS |
|---|---|
| strongswan | Needs evaluation |
strongSwan 4.2.0 through 6.0.7 has a missing release of memory after its effective lifetime in the x509 plugin's attribute certificate parser.
1 affected package
strongswan
| Package | 16.04 LTS |
|---|---|
| strongswan | Needs evaluation |
strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute certificate parser.
1 affected package
strongswan
| Package | 16.04 LTS |
|---|---|
| strongswan | Needs evaluation |
strongSwan 4.6.2 through 6.0.7 has an infinite loop in PKCS#5 decryption.
1 affected package
strongswan
| Package | 16.04 LTS |
|---|---|
| strongswan | Needs evaluation |
libcharon in strongSwan 4.1.2 through 6.0.7 has a missing release of memory after its effective lifetime in the IKE message parser.
1 affected package
strongswan
| Package | 16.04 LTS |
|---|---|
| strongswan | Needs evaluation |
strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka plugin.
1 affected package
strongswan
| Package | 16.04 LTS |
|---|---|
| strongswan | Needs evaluation |
strongSwan 5.0.2 through 6.0.7 allows PKCS#7 certificate enumeration in the openssl plugin that leads to a lack of release of memory after its effective lifetime.
1 affected package
strongswan
| Package | 16.04 LTS |
|---|---|
| strongswan | Needs evaluation |
strongSwan 5.0.2 through 6.0.7 has an Expired Pointer Dereference in PKCS#7 parsing in the openssl plugin.
1 affected package
strongswan
| Package | 16.04 LTS |
|---|---|
| strongswan | Needs evaluation |
A client may send a WebSocket frame with an unknown opcode and a very large declared payload length, causing Jetty to attempt a large memory allocation and potentially exhaust the JVM heap. This occurs when auto-fragmentation is...
2 affected packages
jetty12, jetty9
| Package | 16.04 LTS |
|---|---|
| jetty12 | — |
| jetty9 | Needs evaluation |