Known vulnerabilities in strongswan (Alpine package)

Software CPE: cpe:2.3:o:alpine:strongswan_alpine_package:*:*:*:*:*:alpine_linux:*:*
Total vulnerabilities: 13
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting strongswan (Alpine package) strongswan (Alpine package) is affected by 13 known vulnerabilities: 1 high, 8 medium, 4 low Critical High Medium Low

Vulnerabilities (13)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU15729 - Improper Authentication
CVE-2018-16152
CWE-287 Medium
No
No
5.5.3-r3 06.11.2018 SB2018092501
SB2018112618
SB2020033002
and 6 more
#VU15722 - Improper Authentication
CVE-2018-16151
CWE-287 Medium
No
No
5.5.3-r3 05.11.2018 SB2018100206
SB2018092501
SB2018112618
and 7 more
#VU15165 - Memory corruption
CVE-2018-17540
CWE-119 Medium
No
No
5.5.3-r3 07.10.2018 SB2018100701
SB2018100206
SB2018112618
and 3 more
#VU13125 - Memory corruption
CVE-2018-10811
CWE-119 Low
No
No
5.6.3-r0 31.05.2018 SB2018060108
SB2018061701
SB2018112618
and 5 more
#VU13024 - Buffer Underwrite ('Buffer Underflow')
CVE-2018-5388
CWE-124 Low
No
No
5.6.3-r0 26.05.2018 SB2018052601
SB2018052602
SB2018061701
and 7 more
#VU10821 - Memory corruption
CVE-2018-6459
CWE-119 Low
No
No
5.6.2-r0 02.03.2018 SB2018021906
SB2018112618
SB2018022114
and 2 more
#VU33293 - Data Handling
CVE-2015-3991
CWE-19 High
No
No
5.3.1-r0 07.09.2017 SB2017090724
SB2015060403
SB2015033112
and 3 more
#VU33044 - NULL Pointer Dereference
CVE-2017-11185
CWE-476 Medium
No
No
5.3.5-r4 18.08.2017 SB2017081813
SB2017102324
SB2017081425
#VU6873 - Improper input validation
CVE-2017-9022
CWE-20 Medium
No
No
5.3.5-r2 31.05.2017 SB2017060210
SB2017053009
SB2017060228
and 1 more
#VU6874 - Improper input validation
CVE-2017-9023
CWE-20 Medium
No
No
5.3.5-r2 31.05.2017 SB2017060210
SB2017053009
SB2017060228
and 1 more
#VU32362 - Improper input validation
CVE-2015-8023
CWE-20 Medium
No
No
5.1.3-r1 18.11.2015 SB2015111801
SB2015122101
SB2015111904
#VU32414 - Exposure of sensitive information to an unauthorized actor
CVE-2015-4171
CWE-200 Low
No
No
5.3.2-r0 10.06.2015 SB2015061005
SB2015070105
#VU32451 - Data Handling
CVE-2014-9221
CWE-19 Medium
No
No
5.2.2-r0 07.01.2015 SB2015010702
SB2015013011
SB2015011204
and 6 more