CVE-2026-35330

CVE-2026-35330 整数アンダーフローによるstrongSwan EAP-SIM / EAP-AKA属性パーサーの事前認証ヒープバッファオーバーフロー 説明 src/libsimaka/simakamessage.c:419 の parseattributes は、length バイトが4バイトワード数を示す TLV ヘッダーを読み取ります。ATRAND / ATENCRDATA ブランチの場合: root@kitploit: if hdr-length 4 in.len || in.len type; data = chunkcreatein.ptr + 4,...

[SECURITY] [DSA 6487-1] strongswan security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6487-1 [email protected] https://www.debian.org/security/ Yves-Alexis Perez September 06, 2026 https://www.debian.org/security/faq -...

Linux Distros Unpatched Vulnerability : CVE-2026-78135

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state machine. Because CREATECHILDSA requests are mishandled, there can ...

Linux Distros Unpatched Vulnerability : CVE-2026-78130

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute certificate parser. CVE-2026-78130 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2026-78132

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - strongSwan 5.1.3 through 6.0.7 has an infinite loop in the x509 plugin's attribute certificate parser for ietfAttrSyntax. CVE-2026-78132 Note that Nessus relies...

Linux Distros Unpatched Vulnerability : CVE-2026-78123

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - strongSwan 5.0.2 through 6.0.7 has an Expired Pointer Dereference in PKCS7 parsing in the openssl plugin. CVE-2026-78123 Note that Nessus relies on the presence...

Linux Distros Unpatched Vulnerability : CVE-2026-78127

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libcharon in strongSwan 4.1.2 through 6.0.7 has a missing release of memory after its effective lifetime in the IKE message parser. CVE-2026-78127 Note that...

Linux Distros Unpatched Vulnerability : CVE-2026-78133

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libcharon in strongSwan 6.0.0 through 6.0.7 has a use-after-free in IKEv2 rekeying collision handling. CVE-2026-78133 Note that Nessus relies on the presence of...

Linux Distros Unpatched Vulnerability : CVE-2026-78126

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka plugin. CVE-2026-78126 Note that Nessus relies on the presence of the package a...

Linux Distros Unpatched Vulnerability : CVE-2026-78129

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - strongSwan 4.6.2 through 6.0.7 has an infinite loop in PKCS5 decryption. CVE-2026-78129 Note that Nessus relies on the presence of the package as reported by th...

Linux Distros Unpatched Vulnerability : CVE-2026-78124

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - strongSwan 5.0.2 through 6.0.7 allows PKCS7 certificate enumeration in the openssl plugin that leads to a lack of release of memory after its effective lifetime...

Linux Distros Unpatched Vulnerability : CVE-2026-78134

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins because there can be a missing or mismatched inner EAP identity...

Debian dsa-6487 : charon-cmd - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6487 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6487-1 [email protected] https://www.debian.org/securit...

Linux Distros Unpatched Vulnerability : CVE-2026-78131

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - strongSwan 4.2.0 through 6.0.7 has a missing release of memory after its effective lifetime in the x509 plugin's attribute certificate parser. CVE-2026-78131 No...

Astra Linux – Vulnerability in StrongSwan

StrongSwan before version 5.9.12 has a buffer overflow vulnerability, and there is a possibility of unauthenticated remote code execution through a DH public key value that exceeds the internal buffer of charon-tkm’s DH proxy. The earliest affected version is 5.3.0. An attack can occur through a...

Astra Linux – Vulnerability in StrongSwan

Before version 5.9.8, StrongSwan allowed remote attackers to cause a denial of service in the revocation plugin by sending a crafted end-entity and intermediate CA certificate that contained a CRL/OCSP URL pointing to a server under the attacker’s control that did not respond properly. In some...

EUVD-2026-64602

In strongSwan before 6.0.7, identity parsing/cloning is mishandled. Parsed EAP-Identities that result in an empty but non-NULL encoding are not correctly cloned and trigger a double-free once the duplicates are destroyed...

ALPINE-CVE-2026-47895

In strongSwan before 6.0.7, identity parsing/cloning is mishandled. Parsed EAP-Identities that result in an empty but non-NULL encoding are not correctly cloned and trigger a double-free once the duplicates are destroyed...

AZL-97377 CVE-2026-47895 affecting package strongswan for versions less than 5.9.14-10

In strongSwan before 6.0.7, identity parsing/cloning is mishandled. Parsed EAP-Identities that result in an empty but non-NULL encoding are not correctly cloned and trigger a double-free once the duplicates are destroyed...

CVE-2026-47895

In strongSwan before 6.0.7, identity parsing/cloning is mishandled. Parsed EAP-Identities that result in an empty but non-NULL encoding are not correctly cloned and trigger a double-free once the duplicates are destroyed...