rpm package
suse/strongswan&distro=SUSE Linux Enterprise Workstation Extension 15 SP6
pkg:rpm/suse/strongswan&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2015%20SP6
Vulnerabilities (1)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2025-62291 | Hig | 8.1 | < 5.9.12-150600.3.5.2 | 5.9.12-150600.3.5.2 | Jan 16, 2026 | In the eap-mschapv2 plugin (client-side) in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted message of size 6 through 8, and cause an integer underflow that potentially results in a heap-based buffer overflow. |
- affected < 5.9.12-150600.3.5.2fixed 5.9.12-150600.3.5.2
In the eap-mschapv2 plugin (client-side) in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted message of size 6 through 8, and cause an integer underflow that potentially results in a heap-based buffer overflow.