strongSwan -- Heap-based buffer overflow in eap-mschapv2 plugin due to improper handling of failure request packetsentered 2025-10-27
no CVE referenced
CVE details
CVE-2025-62291
In the eap-mschapv2 plugin (client-side) in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted message of size 6 through 8, and cause an integer underflow that potentially results in a heap-based buffer overflow.
- Score
- 8.1 high
- Published
- 2026-01-16
- Links
- NVD · cve.org · Report wrong data
Matched ports (0)
No port is within the affected range.