https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 19:12:09 +0000 https://vulnerability.circl.lu/vuln/cve-2017-9022 <p>The gmp plugin in strongSwan before 5.5.3 does not properly validate RSA public keys before calling mpz_powm_sec, which allows remote peers to cause a denial of service (floating point exception and process crash) via a crafted certificate.</p> <p>The gmp plugin in strongSwan before 5.5.3 does not properly validate RSA public keys before calling mpz_powm_sec, which allows remote peers to cause a denial of service (floating point exception and process crash) via a crafted certificate.</p> https://vulnerability.circl.lu/vuln/cve-2017-9022 https://vulnerability.circl.lu/vuln/usn-3301-1 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: strongswan, Ubuntu:16.04:LTS: strongswan</p> <p>It was discovered that the strongSwan gmp plugin incorrectly validated RSA public keys. A remote attacker could use this issue to cause strongSwan to crash, resulting in a denial of service. (CVE-2017-9022)</p> <p>It was discovered that strongSwan incorrectly parsed ASN.1 CHOICE types. A remote attacker could use this issue to cause strongSwan to hang, resulting in a denial of service. (CVE-2017-9023)</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: strongswan, Ubuntu:16.04:LTS: strongswan</p> <p>It was discovered that the strongSwan gmp plugin incorrectly validated RSA public keys. A remote attacker could use this issue to cause strongSwan to crash, resulting in a denial of service. (CVE-2017-9022)</p> <p>It was discovered that strongSwan incorrectly parsed ASN.1 CHOICE types. A remote attacker could use this issue to cause strongSwan to hang, resulting in a denial of service. (CVE-2017-9023)</p> https://vulnerability.circl.lu/vuln/usn-3301-1