CVE Catalog
CVE-2015-3991
CriticalSummary
strongSwan versions 5.2.2 and 5.3.0 allow remote attackers to cause a denial of service (daemon crash) or execute arbitrary code.
Risk Assessment
Attackers can exploit this vulnerability to disrupt VPN service or gain control over the system, posing a serious security threat to the organization.
Recommendation
It is recommended to update strongSwan to the latest version to mitigate this vulnerability and to monitor systems for unauthorized activities.
Original NVD description (English source)
strongSwan 5.2.2 and 5.3.0 allows remote attackers to cause a denial of service (daemon crash) or execute arbitrary code.