CVE-2021-41990: Integer Overflow

First published: Mon Oct 18 2021(Updated: )

The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate with an RSASSA-PSS signature. For example, this can be triggered by an unrelated self-signed CA certificate sent by an initiator. Remote code execution cannot occur.

Credit: cve@mitre.org cve@mitre.org

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/security-tracker-debian
• agent/type
• collector/mitre-cve
• source/MITRE
• agent/severity
• agent/references
• agent/weakness
• agent/description
• agent/first-publish-date
• agent/last-modified-date
• agent/author
• agent/event
• agent/source
• collector/nvd-api
• source/NVD
• agent/software-canonical-lookup
• agent/software-canonical-lookup-request
• agent/softwarecombine
• agent/tags
• collector/nvd-index
• package-manager/debian
• vendor/strongswan
• canonical/strongswan
• version/strongswan/5.6.1
• vendor/debian
• canonical/debian linux
• version/debian linux/10.0
• version/debian linux/11.0
• vendor/fedoraproject
• canonical/red hat fedora
• version/red hat fedora/33
• version/red hat fedora/34
• version/red hat fedora/35
• vendor/siemens
• canonical/siemens 6gk6108-4am00-2ba2
• canonical/siemens 6gk6108-4am00-2ba2 firmware
• canonical/siemens 6gk6108-4am00-2da2
• canonical/siemens 6gk6108-4am00-2da2 firmware
• canonical/siemens 6gk5804-0ap00-2aa2
• canonical/siemens 6gk5804-0ap00-2aa2 firmware
• canonical/siemens 6gk5812-1aa00-2aa2
• canonical/siemens 6gk5812-1ba00-2aa2
• canonical/siemens 6gk5812-1ba00-2aa2 firmware
• canonical/siemens 6gk5816-1ba00-2aa2 firmware
• canonical/siemens 6gk5816-1ba00-2aa2
• canonical/siemens 6gk5826-2ab00-2ab2
• canonical/siemens 6gk5826-2ab00-2ab2 firmware
• canonical/siemens 6gk5874-2aa00-2aa2
• canonical/siemens 6gk5874-2aa00-2aa2 firmware
• canonical/siemens 6gk5874-3aa00-2aa2
• canonical/siemens 6gk5874-3aa00-2aa2 firmware
• canonical/siemens 6gk5876-3aa02-2ea2
• canonical/siemens 6gk5876-3aa02-2ba2 firmware
• canonical/siemens 6gk5876-3aa02-2ea2 firmware
• canonical/siemens 6gk5876-4aa00-2ba2
• canonical/siemens 6gk5876-4aa00-2da2
• canonical/siemens 6gk5876 firmware
• canonical/siemens 6gk5876-4aa00-2da2 firmware
• canonical/siemens 6gk5856-2ea00-3da1
• canonical/siemens 6gk series
• canonical/siemens 6gk5856-2ea00-3da1 firmware
• canonical/siemens 6gk5856-2ea00-3aa1 firmware
• canonical/siemens 6gk5615-0aa00-2aa2
• canonical/siemens 6gk5615-0aa00-2aa2 firmware