Threats tagged 'ghsa-frr2-5qjr-h4hw'

strongSwan versions from 4.5.0 up to but not including 6.0.5 contain an integer underflow vulnerability in the EAP-TTLS AVP parser. This flaw allows unauthenticated remote attackers to cause a denial of service by sending specially crafted AVP data with invalid length fields during IKEv2 authentication. The vulnerability arises from failure to validate AVP length fields before subtraction, leading to excessive memory allocation or NULL pointer dereference that crashes the charon IKE daemon.