https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-03T05:32:17.451650+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2017-9022 CVE-2017-9022 2026-10-03T05:32:17.494655+00:00

The gmp plugin in strongSwan before 5.5.3 does not properly validate RSA public keys before calling mpz_powm_sec, which allows remote peers to cause a denial of service (floating point exception and process crash) via a crafted certificate.

 https://vulnerability.circl.lu/vuln/usn-3301-1 USN-3301-1 — strongswan vulnerabilities 2026-10-03T05:32:17.494749+00:00

Affected: Ubuntu:14.04:LTS: strongswan, Ubuntu:16.04:LTS: strongswan

It was discovered that the strongSwan gmp plugin incorrectly validated RSA public keys. A remote attacker could use this issue to cause strongSwan to crash, resulting in a denial of service. (CVE-2017-9022)

It was discovered that strongSwan incorrectly parsed ASN.1 CHOICE types. A remote attacker could use this issue to cause strongSwan to hang, resulting in a denial of service. (CVE-2017-9023)