CVE-2025-62291

EUVD-2026-2870
In the eap-mschapv2 plugin (client-side) in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted message of size 6 through 8, and cause an integer underflow that potentially results in a heap-based buffer overflow.
Wrap or Wraparound
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
mitreCNA
8.1 HIGH
NETWORK
HIGH
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 3%
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
strongswanstrongswan
4.2.12 ≤
𝑥
< 6.0.3
CNA
Debian logo
Debian Releases
Debian Product
Codename
strongswan
bookworm
5.9.8-5+deb12u4
fixed
bookworm (security)
5.9.8-5+deb12u4
fixed
bullseye
vulnerable
bullseye (security)
5.9.1-1+deb11u6
fixed
forky
6.0.6-1
fixed
sid
6.0.6-1
fixed
trixie
6.0.1-6+deb13u5
fixed
trixie (security)
6.0.1-6+deb13u5
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
strongswan
bionic
needs-triage
focal
needs-triage
jammy
Fixed 5.9.5-2ubuntu2.4
released
noble
Fixed 5.9.13-2ubuntu4.24.04.1
released
plucky
Fixed 5.9.13-2ubuntu4.25.04.1
released
questing
Fixed 6.0.1-6ubuntu4.1
released
resolute
Fixed 6.0.1-6ubuntu5
released
trusty
needs-triage
xenial
needs-triage
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
strongswan
suse enterprise desktop 15 SP6
5.9.12-150600.3.5.2
fixed
suse enterprise desktop 15 SP7
5.9.14-150700.3.3.1
fixed
suse enterprise sap 15 SP6
5.9.12-150600.3.5.2
fixed
suse enterprise sap 15 SP7
5.9.14-150700.3.3.1
fixed
suse enterprise server 12 SP3
5.1.3-26.29.1
fixed
suse enterprise server 12 SP5
5.1.3-26.29.1
fixed
suse enterprise server 15 SP2
5.8.2-150200.11.45.1
fixed
suse enterprise server 15 SP3
5.8.2-150200.11.45.1
fixed
suse enterprise server 15 SP4
5.9.11-150400.19.20.1
fixed
suse enterprise server 15 SP5
5.9.11-150500.5.9.1
fixed
suse enterprise server 15 SP6
5.9.12-150600.3.5.2
fixed
suse enterprise server 15 SP7
5.9.14-150700.3.3.1
fixed
strongswan-doc
suse enterprise desktop 15 SP6
5.9.12-150600.3.5.2
fixed
suse enterprise desktop 15 SP7
5.9.14-150700.3.3.1
fixed
suse enterprise sap 15 SP6
5.9.12-150600.3.5.2
fixed
suse enterprise sap 15 SP7
5.9.14-150700.3.3.1
fixed
suse enterprise server 12 SP3
5.1.3-26.29.1
fixed
suse enterprise server 12 SP5
5.1.3-26.29.1
fixed
suse enterprise server 15 SP2
5.8.2-150200.11.45.1
fixed
suse enterprise server 15 SP3
5.8.2-150200.11.45.1
fixed
suse enterprise server 15 SP4
5.9.11-150400.19.20.1
fixed
suse enterprise server 15 SP5
5.9.11-150500.5.9.1
fixed
suse enterprise server 15 SP6
5.9.12-150600.3.5.2
fixed
suse enterprise server 15 SP7
5.9.14-150700.3.3.1
fixed
strongswan-hmac
suse enterprise desktop 15 SP6
5.9.12-150600.3.5.2
fixed
suse enterprise desktop 15 SP7
5.9.14-150700.3.3.1
fixed
suse enterprise sap 15 SP6
5.9.12-150600.3.5.2
fixed
suse enterprise sap 15 SP7
5.9.14-150700.3.3.1
fixed
suse enterprise server 12 SP3
5.1.3-26.29.1
fixed
suse enterprise server 12 SP5
5.1.3-26.29.1
fixed
suse enterprise server 15 SP2
5.8.2-150200.11.45.1
fixed
suse enterprise server 15 SP3
5.8.2-150200.11.45.1
fixed
suse enterprise server 15 SP4
5.9.11-150400.19.20.1
fixed
suse enterprise server 15 SP5
5.9.11-150500.5.9.1
fixed
suse enterprise server 15 SP6
5.9.12-150600.3.5.2
fixed
suse enterprise server 15 SP7
5.9.14-150700.3.3.1
fixed
strongswan-ipsec
suse enterprise desktop 15 SP6
5.9.12-150600.3.5.2
fixed
suse enterprise desktop 15 SP7
5.9.14-150700.3.3.1
fixed
suse enterprise sap 15 SP6
5.9.12-150600.3.5.2
fixed
suse enterprise sap 15 SP7
5.9.14-150700.3.3.1
fixed
suse enterprise server 12 SP3
5.1.3-26.29.1
fixed
suse enterprise server 12 SP5
5.1.3-26.29.1
fixed
suse enterprise server 15 SP2
5.8.2-150200.11.45.1
fixed
suse enterprise server 15 SP3
5.8.2-150200.11.45.1
fixed
suse enterprise server 15 SP4
5.9.11-150400.19.20.1
fixed
suse enterprise server 15 SP5
5.9.11-150500.5.9.1
fixed
suse enterprise server 15 SP6
5.9.12-150600.3.5.2
fixed
suse enterprise server 15 SP7
5.9.14-150700.3.3.1
fixed
strongswan-libs0
suse enterprise desktop 15 SP6
5.9.12-150600.3.5.2
fixed
suse enterprise desktop 15 SP7
5.9.14-150700.3.3.1
fixed
suse enterprise sap 15 SP6
5.9.12-150600.3.5.2
fixed
suse enterprise sap 15 SP7
5.9.14-150700.3.3.1
fixed
suse enterprise server 12 SP3
5.1.3-26.29.1
fixed
suse enterprise server 12 SP5
5.1.3-26.29.1
fixed
suse enterprise server 15 SP2
5.8.2-150200.11.45.1
fixed
suse enterprise server 15 SP3
5.8.2-150200.11.45.1
fixed
suse enterprise server 15 SP4
5.9.11-150400.19.20.1
fixed
suse enterprise server 15 SP5
5.9.11-150500.5.9.1
fixed
suse enterprise server 15 SP6
5.9.12-150600.3.5.2
fixed
suse enterprise server 15 SP7
5.9.14-150700.3.3.1
fixed