← Database

CVE-2021-41990

HIGH CVSS: 7.5 Published: 2021-10-18 Modified: 2026-06-17

Description

The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate with an RSASSA-PSS signature. For example, this can be triggered by an unrelated self-signed CA certificate sent by an initiator. Remote code execution cannot occur.

Affected Platforms

Siemens 6Gk6108-4Am00-2Da2 FirmwareStrongswan StrongswanSiemens 6Gk5876-3Aa02-2Ba2 FirmwareSiemens 6Gk5876-3Aa02-2Ea2Debian Debian LinuxSiemens 6Gk5812-1Aa00-2Aa2Siemens 6Gk5876-3Aa02-2Ba2Siemens 6Gk5874-2Aa00-2Aa2 FirmwareSiemens 6Gk5812-1Ba00-2Aa2 FirmwareSiemens 6Gk5615-0Aa00-2Aa2

Weakness Type

CWE-190

References