Linux Distros Unpatched Vulnerability : CVE-2022-40617

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - strongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation plugin by sending a crafted end-entity and intermediate CA...

Ruijie EG306MG 安全漏洞

Ruijie EG306MG is a router from China Ruijie Ruijie. A security vulnerability exists in Ruijie EG306MG version 3.01B11P309, which originates from improper handling of the parameter idontcareaboutsecurityanduseaggressivemodepsk in the file /etc/strongswan.conf, which may cause sensitive data to be...

Linux Distros Unpatched Vulnerability : CVE-2021-41990

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate with an RSASSA-PSS signature. For example, this can be trigger...

Linux Distros Unpatched Vulnerability : CVE-2021-45079

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early without actually authenticating the client and in the case of EAP...

Linux Distros Unpatched Vulnerability : CVE-2021-41991

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests with different certificates to fill the...

PT-2025-32450 · Unknown +1 · Strongswan +1

Name of the Vulnerable Software and Affected Versions: Ruijie EG306MG version 3.01B11P309 Description: A vulnerability exists due to missing encryption of sensitive data. The issue is related to the processing of the /etc/strongswan.conf file within the strongSwan component. Manipulation of the i...

NewStart CGSL MAIN 7.02 : strongswan Vulnerability (NS-SA-2025-0154)

The remote NewStart CGSL host, running version MAIN 7.02, has strongswan packages installed that are affected by a vulnerability: - strongSwan before 5.9.12 has a buffer overflow and possible unauthenticated remote code execution via a DH public value that exceeds the internal buffer in...

CVE-2025-44647

In TRENDnet TEW-WLC100P 2.03b03, the idontcareaboutsecurityanduseaggressivemodepsk option is enabled in the strongSwan configuration file, so that IKE Responders are allowed to use IKEv1 Aggressive Mode with Pre-Shared Keys to conduct offline attacks on the openly transmitted hash of the PSK...

CVE-2025-44647

In TRENDnet TEW-WLC100P 2.03b03, the idontcareaboutsecurityanduseaggressivemodepsk option is enabled in the strongSwan configuration file, so that IKE Responders are allowed to use IKEv1 Aggressive Mode with Pre-Shared Keys to conduct offline attacks on the openly transmitted hash of the PSK...

CVE-2025-44647

In TRENDnet TEW-WLC100P 2.03b03, the idontcareaboutsecurityanduseaggressivemodepsk option is enabled in the strongSwan configuration file, so that IKE Responders are allowed to use IKEv1 Aggressive Mode with Pre-Shared Keys to conduct offline attacks on the openly transmitted hash of the PSK...

PT-2025-30291 · Unknown +1 · Strongswan +1

Name of the Vulnerable Software and Affected Versions: TRENDnet TEW-WLC100P version 2.03b03 Description: The i dont care about security and use aggressive mode psk option is enabled in the strongSwan configuration file, allowing IKE Responders to use IKEv1 Aggressive Mode with Pre-Shared Keys. Th...

strongSwan: Buffer Overflow

Background strongSwan is an IPSec implementation for Linux. Description Multiple vulnerabilities have been discovered in strongSwan. Please review the CVE identifiers referenced below for details. Impact A vulnerability in charon-tkm related to processing DH public values was discovered in...

GLSA-202507-04 : strongSwan: Buffer Overflow

The remote host is affected by the vulnerability described in GLSA-202507-04 strongSwan: Buffer Overflow Multiple vulnerabilities have been discovered in strongSwan. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly from...

TencentOS Server 4: strongswan (TSSA-2024:1137)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:1137 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

Fedora: Security Advisory (FEDORA-2024-dc9e695c3a)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2010-2628

The IKE daemon in strongSwan 4.3.x before 4.3.7 and 4.4.x before 4.4.1 does not properly check the return values of snprintf calls, which allows remote attackers to execute arbitrary code via crafted 1 certificate or 2 identity data that triggers buffer overflows...

Linux Distros Unpatched Vulnerability : CVE-2017-9023

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ASN.1 parser in strongSwan before 5.5.3 improperly handles CHOICE types when the x509 plugin is enabled, which allows remote attackers to cause a denial of...

SUSE: Security Advisory (SUSE-SU-2022:0202-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-51285

Name of the Vulnerable Software and Affected Versions strongSwan affected versions not specified Description A local user may be able to authenticate using the credentials of another user if those credentials are locally accessible. This issue affects network-manager in Debian Linux...

PT-2025-44223

Name of the Vulnerable Software and Affected Versions strongSwan versions 5.9.13-2ubuntu4.25.04.1 Description The strongSwan client had an incorrect handling of EAP-MSCHAPv2 failure requests. An attacker could potentially cause a denial of service, or possibly execute arbitrary code, by tricking ...