Known vulnerabilities in strongswan (Alpine package)

Software CPE: cpe:2.3:o:alpine:strongswan_alpine_package:*:*:*:*:*:alpine_linux:*:*
Total vulnerabilities: 16
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting strongswan (Alpine package) strongswan (Alpine package) is affected by 16 known vulnerabilities: 3 high, 8 medium, 5 low Critical High Medium Low

Vulnerabilities (16)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU15729 - Improper Authentication
CVE-2018-16152
CWE-287 Medium
No
No
5.5.3-r3 06.11.2018 SB2018092501
SB2018112618
SB2020033002
and 7 more
#VU15722 - Improper Authentication
CVE-2018-16151
CWE-287 Medium
No
No
5.5.3-r3 05.11.2018 SB2018100206
SB2018092501
SB2018112618
and 8 more
#VU15165 - Memory corruption
CVE-2018-17540
CWE-119 Medium
No
No
5.5.3-r3 07.10.2018 SB2018100701
SB2018100206
SB2018112618
and 4 more
#VU13125 - Memory corruption
CVE-2018-10811
CWE-119 Low
No
No
5.6.3-r0 31.05.2018 SB2018060108
SB2018061701
SB2018112618
and 6 more
#VU13024 - Buffer Underwrite ('Buffer Underflow')
CVE-2018-5388
CWE-124 Low
No
No
5.6.3-r0 26.05.2018 SB2018052601
SB2018052602
SB2018061701
and 8 more
#VU10821 - Memory corruption
CVE-2018-6459
CWE-119 Low
No
No
5.6.2-r0 02.03.2018 SB2018021906
SB2018112618
SB2018022114
and 2 more
#VU33293 - Data Handling
CVE-2015-3991
CWE-19 High
No
No
5.3.1-r0 07.09.2017 SB2017090724
SB2015060403
SB2015033112
and 3 more
#VU33044 - NULL Pointer Dereference
CVE-2017-11185
CWE-476 Medium
No
No
5.3.5-r4 18.08.2017 SB2017081813
SB2017102324
SB2017081425
and 1 more
#VU6873 - Improper input validation
CVE-2017-9022
CWE-20 Medium
No
No
5.3.5-r2 31.05.2017 SB2017060210
SB2017053009
SB2017060228
and 1 more
#VU6874 - Improper input validation
CVE-2017-9023
CWE-20 Medium
No
No
5.3.5-r2 31.05.2017 SB2017060210
SB2017053009
SB2017060228
and 1 more
#VU33045 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-5367
CWE-79 Low
No
No
- 06.02.2017 SB2017041503
#VU33046 - Cross-Site Request Forgery (CSRF)
CVE-2017-5368
CWE-352 High
No
No
- 06.02.2017 SB2017041504
#VU33047 - Heap-based Buffer Overflow
CVE-2015-8863
CWE-122 High
No
No
- 06.05.2016 SB2016052608
SB2016060215
SB2016120807
and 3 more
#VU32362 - Improper input validation
CVE-2015-8023
CWE-20 Medium
No
No
5.1.3-r1 18.11.2015 SB2015111801
SB2015122101
SB2015111904
and 1 more
#VU32414 - Exposure of sensitive information to an unauthorized actor
CVE-2015-4171
CWE-200 Low
No
No
5.3.2-r0 10.06.2015 SB2015061005
SB2015070105
SB2015060807
#VU32451 - Data Handling
CVE-2014-9221
CWE-19 Medium
No
No
5.2.2-r0 07.01.2015 SB2015010702
SB2015013011
SB2015011204
and 7 more