GCVE-110-CERTCC-2018-338343

Advisory PublishedCVSS 4.9/10

Vulnetix · Advisory published May 22, 2018

strongSwan VPN's charon server prior to version 5.6.3 does not check packet length and may allow buffer underflow, resulting in denial of service.

Download JSON Open in Console

Risk Scores

CVSS 2.0

4.9/10

Medium · AV:N/AC:H/Au:S/C:N/I:N/A:C

certcc-cam

impact0population0exploitation0widely_known0score_current0ease_of_exploitation0

certcc-vrda

d1_direct_report1

certcc-cvss-temporal-env

temporal_score3.8remediation_levelOFreport_confidenceCenvironmental_score3.85851701088target_distributionNDenvironmental_vectorCDP:ND/TD:ND/CR:ND/IR:ND/AR:ND

Aliases

CVE-2018-5388

References

strongSwan VPN charon server vulnerable to buffer underflow

url

strongSwan VPN charon server vulnerable to buffer underflow

url

strongSwan VPN charon server vulnerable to buffer underflow

advisory

Browse GCVE Records

72,921 records in the GCVE database · Updated July 15, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON