CyberRota Analysis
AI-GeneratedThe vulnerability affects the OpenSSL plugin in strongSwan versions 5.0.2 through 6.0.7, allowing for PKCS#7 certificate enumeration, which can lead to memory not being released after its effective lifetime. While the severity is rated low, it could potentially lead to memory leaks and performance degradation in applications utilizing these versions. Organizations using strongSwan for VPN services should prioritize this update to mitigate any potential resource exhaustion issues.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
strongSwan 5.0.2 through 6.0.7 allows PKCS#7 certificate enumeration in the openssl plugin that leads to a lack of release of memory after its effective lifetime.