Unscored severity · published Aug 20, 2010
CVE-2010-2628
The IKE daemon in strongSwan 4.3.x before 4.3.7 and 4.4.x before 4.4.1 does not properly check the return values of snprintf calls, which allows remote attackers to execute…
–
CVSS
4%
EPSS
No
On KEV
Description
The IKE daemon in strongSwan 4.3.x before 4.3.7 and 4.4.x before 4.4.1 does not properly check the return values of snprintf calls, which allows remote attackers to execute arbitrary code via crafted (1) certificate or (2) identity data that triggers buffer overflows.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.0% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ST
Strongswan · Strongswan
4.3.0; 4.3.1; 4.3.2; 4.3.3; 4.3.4; 4.3.5; +2 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-2628
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-2628
Patch
http://download.strongswan.org/patches/08_snprintf_patch/strongswan-4.3.3_snprintf.patch
Patch
http://download.strongswan.org/patches/08_snprintf_patch/strongswan-4.3.4_snprintf.patch
Patch
http://download.strongswan.org/patches/08_snprintf_patch/strongswan-4.3.5_snprintf.patch
Patch
http://download.strongswan.org/patches/08_snprintf_patch/strongswan-4.3.6_snprintf.patch
Patch
http://download.strongswan.org/patches/08_snprintf_patch/strongswan-4.4.0_snprintf.patch
lists.opensuse.org
http://lists.opensuse.org/opensuse-updates/2010-08/msg00026.html
More from Strongswan
9.8
CVE-2023-41913
strongSwan before 5.9.12 has a buffer overflow and possible unauthenticated remote code execution via a DH public value that exceeds the internal buffer in charon-tkm's DH proxy
9.8
CVE-2023-26463
strongSwan 5.9.8 and 5.9.9 potentially allows remote code execution because it uses a variable named "public" for two different purposes within the same function
9.8
CVE-2015-3991
strongSwan 5.2.2 and 5.3.0 allows remote attackers to cause a denial of service (daemon crash) or execute arbitrary code
9.1
CVE-2021-45079
In strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early without actually authenticating the client and (in the case of EAP methods with mutual…
8.1
CVE-2025-62291
In the eap-mschapv2 plugin (client-side) in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted message of size 6 through 8, and cause an integer underflow…