1542 matches found
strongswan
strongSwan 設定 概要 strongSwan は、オープンソースの IPsec ベースの VPN ソリューションです。 このドキュメントは、モダンな vici Versatile IKE Configuration Interface を使用する strongSwan swanctl コマンドの簡単な紹介です。レガシーな stroke 設定インターフェースを使用する非推奨の ipsec コマンドについては こちら で説明しています。より詳細な情報については、man ページ、新しい ドキュメントサイト、およびレガシーな wiki を参照してください。 クイックスタート...
algo
Algo VPN Algo VPN is a set of Ansible scripts that simplify the setup of a personal WireGuard and IPsec VPN. It uses the most secure defaults available and works with common cloud providers. See our release announcement for more information. Features Supports only IKEv2 with strong crypto AES-GCM...
CVE-2026-25075-check
CVE-2026-25075 취약점 평가 도구 strongSwan VPN 서버가 CVE-2026-25075에 취약한지 중단을 유발하지 않고 안전하게 탐지합니다. 전체 분석 글은 Bishop Fox 블로그에서 확인하세요. 설명 CVE-2026-25075는 strongSwan의 EAP-TTLS 플러그인에 존재하는 정수 언더플로integer underflow 취약점으로, 원격의 인증되지 않은 공격자가 특수하게 조작된 EAP-TTLS 메시지를 통해 IKE 데몬을 충돌시킬 수 있습니다. 이 취약점은 4.5.0부터 6.0.4까지의 모든...
AZL-100049 CVE-2026-78135 affecting package strongswan 5.9.14-10
libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state machine. Because CREATECHILDSA requests are mishandled, there can be an authentication bypass...
CVE-2026-78135
libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state machine. Because CREATECHILDSA requests are mishandled, there can be an authentication bypass...
DEBIAN-CVE-2026-78135
libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state machine. Because CREATECHILDSA requests are mishandled, there can be an authentication bypass...
DEBIAN-CVE-2026-78130
strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute certificate parser...
AZL-100040 CVE-2026-78127 affecting package strongswan 5.9.14-10
libcharon in strongSwan 4.1.2 through 6.0.7 has a missing release of memory after its effective lifetime in the IKE message parser...
AZL-100031 CVE-2026-78131 affecting package strongswan 5.9.14-10
strongSwan 4.2.0 through 6.0.7 has a missing release of memory after its effective lifetime in the x509 plugin's attribute certificate parser...
DEBIAN-CVE-2026-78133
libcharon in strongSwan 6.0.0 through 6.0.7 has a use-after-free in IKEv2 rekeying collision handling...
CVE-2026-78130
strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute certificate parser...
CVE-2026-78133
libcharon in strongSwan 6.0.0 through 6.0.7 has a use-after-free in IKEv2 rekeying collision handling...
CVE-2026-78131
strongSwan 4.2.0 through 6.0.7 has a missing release of memory after its effective lifetime in the x509 plugin's attribute certificate parser...
CVE-2026-78134
strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins because there can be a missing or mismatched inner EAP identity...
DEBIAN-CVE-2026-78129
strongSwan 4.6.2 through 6.0.7 has an infinite loop in PKCS5 decryption...
AZL-100046 CVE-2026-78132 affecting package strongswan 5.9.14-10
strongSwan 5.1.3 through 6.0.7 has an infinite loop in the x509 plugin's attribute certificate parser for ietfAttrSyntax...
DEBIAN-CVE-2026-78134
strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins because there can be a missing or mismatched inner EAP identity...
AZL-100025 CVE-2026-78129 affecting package strongswan 5.9.14-10
strongSwan 4.6.2 through 6.0.7 has an infinite loop in PKCS5 decryption...