AZL-100043 CVE-2026-78126 affecting package strongswan 5.9.14-10

strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka plugin...

DEBIAN-CVE-2026-78126

strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka plugin...

CVE-2026-78126

strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka plugin...

CVE-2026-78126

strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka plugin...

CVE-2026-78126

CVE-2026-78126 affects strongSwan (an IKE/IPsec suite), versions 4.1.10 through 6.0.7 . The vulnerability is a NULL-pointer dereference in the eap-aka plugin triggered when processing an unexpected AKA-Synchronization-Failure message, which can result in a crash (denial of service). The CVSS 3.1 ...

EUVD-2026-75900

strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka plugin...

CVE-2026-78126

strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka plugin...

CVE-2026-78126

strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka plugin...

PT-2026-89674

strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka plugin...

Debian dsa-6487 : charon-cmd - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6487 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6487-1 [email protected] https://www.debian.org/securit...

GHSA-FP46-6VFW-GC9C free5GC AUSF uses non-constant-time authentication comparisons and logs XRES* in 5G-AKA

Summary The AUSF component of free5GC compares authentication response values with normal Go equality helpers instead of constant-time cryptographic comparison functions. Two authentication flows are affected in internal/sbi/processor/ueauthentication.go: 1. 5G-AKA confirmation compares RES and...

free5GC AUSF authentication contexts can be overwritten by concurrent requests for the same SUPI

Summary The AUSF component of free5GC stores per-subscriber authentication state in a global sync.Map keyed only by SUPI. Every incoming authentication request creates a new AusfUeContext and stores it under that SUPI key without checking whether an authentication procedure is already in progress...

Exploit for CVE-2026-35330

CVE-2026-35330 strongSwan EAP-SIM / EAP-AKA attribute parser...

Fedora 36 : freeradius (2022-98832b2cc2)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-98832b2cc2 advisory. Update to upstream release 3.0.26. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessu...

SUSE: Security Advisory (SUSE-SU-2020:3424-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security update for wpa_supplicant (moderate)

openSUSE Security Update: Security update for wpasupplicant Announcement ID: openSUSE-SU-2020:2053-1 Rating: moderate References: 1131644 1131868 1131870 1131871 1131872 1131874 1133640 1144443 1150934 1156920 1166933 1167331 930077 930078 930079 Cross-References: CVE-2015-4141 CVE-2015-4142...