CVE-2012-2388
Fixed in a distro release EPSS 3%
The GMP Plugin in strongSwan 4.2.0 through 4.6.3 allows remote attackers to bypass authentication via a (1) empty or (2) zeroed RSA signature, aka "RSA signature verification vulnerability."
Products: strongswan
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | strongswan | 4.5.2-1.4 |
| Debian 13 | strongswan | 4.5.2-1.4 |
| Debian 14 | strongswan | 4.5.2-1.4 |
| Debian 6.0 | strongswan | 4.4.1-5.2 |
| openSUSE Tumbleweed | strongswan | 5.3.5-1.1 |