> Debian: DSA-6041-1 strongSwan Critical Buffer Overflow CVE-2025-62291
[DATE: 27/10/2025 16:15]
[LANGUAGE: EN]
Xu Biang discovered a buffer overflow bug in the eap-mschapv2 plugin of strongSwan, an IKE/IPsec suite. The eap-mschapv2 plugin doesn't correctly check the length of an EAP-MSCHAPv2 Failure Request packet on the client, which can cause an integer underflow that leads to a crash, and a heap-based buffer