https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-09T19:33:12.804956+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2022-40617 CVE-2022-40617 2026-10-09T19:33:12.807401+00:00

strongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation plugin by sending a crafted end-entity (and intermediate CA) certificate that contains a CRL/OCSP URL that points to a server (under the attacker's control) that doesn't properly respond but (for example) just does nothing after the initial TCP handshake, or sends an excessive amount of application data.

 https://vulnerability.circl.lu/vuln/usn-5651-1 USN-5651-1 — strongswan vulnerability 2026-10-09T19:33:12.807512+00:00

Affected: Ubuntu:18.04:LTS: strongswan, Ubuntu:20.04:LTS: strongswan, Ubuntu:22.04:LTS: strongswan

Lahav Schlesinger discovered that strongSwan incorrectly handled certain OCSP URIs and and CRL distribution points (CDP) in certificates. A remote attacker could possibly use this issue to initiate IKE_SAs and send crafted certificates that contain URIs pointing to servers under their control, which can lead to a denial-of-service attack.