Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2021-41991

EPSS 2.54% · P86
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2021-41991

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests with different certificates to fill the cache and later trigger the replacement of cache entries. The code attempts to select a less-often-used cache entry by means of a random number generator, but this is not done correctly. Remote code execution might be a slight possibility.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
strongSwan 输入验证错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
strongSwan是瑞士Andreas Steffen个人开发者的一套Linux平台使用的开源的基于IPsec的VPN解决方案。该方案包含X.509公开密钥证书、安全储存私钥、智能卡等认证机制。 StrongSwan 中存在输入验证错误漏洞，该漏洞源于产品使用随机数生成器生成缓存条数。攻击者可通过多个请求填充缓存并替换缓存导致服务错误或远程代码执行。以下产品及版本受到影响：StrongSwan 5.9.4 之前版本。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2021-41991

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2021-41991

请登录查看更多情报信息。

Same Patch Batch · n/a · 2021-10-18 · 19 CVEs total

CVE-2021-234499.8 CRITICALSandbox Bypass
CVE-2021-22961GlassWire 代码注入漏洞
CVE-2021-42650Portainer 跨站脚本漏洞
CVE-2021-42055ASUSTek ZenBook Pro Due 15 UX582 安全漏洞
CVE-2021-36513FreeSWITCH 安全漏洞
CVE-2021-42575Sanitize 输入验证错误漏洞
CVE-2021-42576David Kitchen bluemonday 安全漏洞
CVE-2021-41990strongSwan 输入验证错误漏洞
CVE-2020-8291Rocket.Chat 跨站脚本漏洞
CVE-2021-22942Ruby on Rails 输入验证错误漏洞
CVE-2021-21797Nitro Software Nitro Pro 资源管理错误漏洞
CVE-2021-21796Nitro Software Nitro Pro 资源管理错误漏洞
CVE-2010-2496Pacemaker 授权问题漏洞
CVE-2021-41611Squid 信任管理问题漏洞
CVE-2021-38562Best Practical Request Tracker 信息泄露漏洞
CVE-2021-42565myfactory.FMS 跨站脚本漏洞
CVE-2021-42566myfactory.FMS 跨站脚本漏洞
CVE-2021-38297Google Go 缓冲区错误漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2021-41991

No comments yet

Leave a comment