CVE-2021-41990

CVE-2021-41990 describes a remote integer overflow vulnerability in the gmp plugin of strongSwan versions prior to 5.9.4, impacting products like Debian, Fedora, and Siemens. This flaw can be triggered by a specially crafted certificate, such as a self-signed CA certificate from an initiator, leading to a denial-of-service condition. The vulnerability has a CVSS score of 7.5 (HIGH), indicating a network-based attack with low complexity and no user interaction required, resulting in high availability impact but no confidentiality or integrity compromise, and importantly, no remote code execution. Currently, there is no evidence of active exploitation, no public exploit code (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage, suggesting a low immediate threat.