Security Advisory

CVE-2017-9022

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-06-08 16:00:00

Last updated 2025-12-03 21:16:39

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

The gmp plugin in strongSwan before 5.5.3 does not properly validate RSA public keys before calling mpz_powm_sec, which allows remote peers to cause a denial of service (floating point exception and process crash) via a crafted certificate.

← Browse all CVEs View on cve.org ↗