tocsin

Debian/strongswan: unknown

The GMP Plugin in strongSwan 4.2.0 through 4.6.3 allows remote attackers to bypass authentication via a (1) empty or (2) zeroed RSA signature, aka "RSA signature verification vulnerability."

Action: Upgrade strongswan to 4.5.2-1.4 or later.

Affected

introducedfixedlast affected
04.5.2-1.4-

Fixed versions

4.5.2-1.4

Sources

published · modified · JSON