Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2021-45079
9.1
CRITICALCVSS v3
Published
January 31, 2022
CVSS v2
5.8 MEDIUM
Affected
6 projects
Assigned by
MITRE
Severity scale
010
Description
In strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early without actually authenticating the client and (in the case of EAP methods with mutual authentication and EAP-only authentication for IKEv2) even without server authentication.
GitHub
Crates.io
fedora
Python Package Index
Docker Hub
NPM
RubyGems