CVE-2017-11185

The gmp plugin in strongSwan before 5.6.0 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted RSA signature.

Score

CVSS 3.1 7.5 High

Status

Modified - cve@mitre.org

Published

2017-08-18

Last modified

2025-12-04

Weaknesses

CWE-476

Affected products

• Strongswan (Strongswan)

References

• http://www.debian.org/security/2017/dsa-3962
• http://www.securityfocus.com/bid/100492
• https://www.strongswan.org/blog/2017/08/14/strongswan-vulnerability-%28cve-2017-11185%29.html