Remote Denial of Service Vulnerability in strongSwan by strongSwan Project
CVE-2018-10811

7.5HIGH

Key Information:

Vendor

Strongswan

Status
Strongswan
Vendor
CVE Published:
19 June 2018

What is CVE-2018-10811?

An uninitialized variable in strongSwan versions 5.6.0 and earlier can lead to remote denial of service. Attackers exploiting this vulnerability can cause potential service outages, disrupting operations and access to secure communications. Updating to a patched version is essential to mitigate the risks posed by this vulnerability.

References

https://security.gentoo.org/glsa/201811-16
vendor-advisoryx_refsource_GENTOO
https://www.strongswan.org/blog/2018/05/28/strongswan-vul...
x_refsource_CONFIRM
https://lists.fedoraproject.org/archives/list/package-ann...
vendor-advisoryx_refsource_FEDORA

EPSS Score

6% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.