PT-2026-89673

strongSwan 5.0.2 through 6.0.7 allows PKCS7 certificate enumeration in the openssl plugin that leads to a lack of release of memory after its effective lifetime...

PT-2026-89676

strongSwan 4.6.2 through 6.0.7 has an infinite loop in PKCS5 decryption...

CVE-2026-25075-check

CVE-2026-25075 Vulnerability Assessment Tool Safely detect whether a strongSwan VPN server is vulnerable to CVE-2026-25075 without causing any disruption. See the full write-up at the Bishop Fox blog. Description CVE-2026-25075 is an integer underflow vulnerability in strongSwan's EAP-TTLS plugin...

strongswan

strongSwan Configuration Overview strongSwan is an OpenSource IPsec-based VPN solution. This document is just a short introduction of the strongSwan swanctl command which uses the modern vici Versatile IKE Configuration Interface. The deprecated ipsec command using the legacy stroke configuration...

Security update for strongswan

This update for strongswan fixes the following issues: CVE-2026-47895: Double-Free When Destroying Certain Cloned Identities bsc1266360. CVE-2026-78123: Undefined Memory Access When Handling PKCS7 Containers bsc1276533. CVE-2026-78124: Memory Leak When Processing Certificates in PKCS7 Containers...

CVE-2026-35333

CVE-2026-35333 strongSwan RADIUS attribute-iterator pre-auth infinite loop / remote DoS. Description attributeenumerate in src/libradius/radiusmessage.c:247-271 accepts RADIUS attributes whose length byte is smaller than sizeofrattrt 2. For length == 0: data-len = next-length - sizeofrattrt...

CVE-2026-35330

CVE-2026-35330 strongSwan EAP-SIM / EAP-AKA attribute parser pre-auth heap buffer overflow via integer underflow. Description parseattributes in src/libsimaka/simakamessage.c:419 reads TLV headers whose length byte counts 4-byte words. For the ATRAND / ATENCRDATA branch: root@kitploit: if...

[SECURITY] [DSA 6487-1] strongswan security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6487-1 [email protected] https://www.debian.org/security/ Yves-Alexis Perez September 06, 2026 https://www.debian.org/security/faq -...

Linux Distros Unpatched Vulnerability : CVE-2026-78123

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - strongswan - None Ubuntu Linux - Undefined Memory Access When Handling PKCS7 Containers CVE-2026-78123 Note that Nessus relies on the presence of...

Linux Distros Unpatched Vulnerability : CVE-2026-78132

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - strongswan - None Ubuntu Linux - Infinite Loop When Parsing Attribute Certificates CVE-2026-78132 Note that Nessus relies on the presence of the...

Linux Distros Unpatched Vulnerability : CVE-2026-78133

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - strongswan - None Ubuntu Linux - Use-After-Free During Multi-KE Rekey Collision CVE-2026-78133 Note that Nessus relies on the presence of the...

Linux Distros Unpatched Vulnerability : CVE-2026-78127

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - strongswan - None Ubuntu Linux - Memory Leak During Message Stringification CVE-2026-78127 Note that Nessus relies on the presence of the package...

Linux Distros Unpatched Vulnerability : CVE-2026-78130

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - strongswan - None Ubuntu Linux - NULL-Pointer Dereference in Attribute Certificate Validation CVE-2026-78130 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2026-78135

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - strongswan - None Ubuntu Linux - Creation of a Child SA Pre-Authentication CVE-2026-78135 Note that Nessus relies on the presence of the package ...

Linux Distros Unpatched Vulnerability : CVE-2026-78126

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - strongswan - None Ubuntu Linux - NULL-Pointer Dereference When Handling AKA- Synchronization-Failure CVE-2026-78126 Note that Nessus relies on th...

Linux Distros Unpatched Vulnerability : CVE-2026-78134

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - strongswan - None Ubuntu Linux - Missing Inner EAP Method Authentication Details CVE-2026-78134 Note that Nessus relies on the presence of the...

Linux Distros Unpatched Vulnerability : CVE-2026-78129

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - strongswan - None Ubuntu Linux - Unbounded Iteration When Decrypting PKCS7 Containers CVE-2026-78129 Note that Nessus relies on the presence of t...

Linux Distros Unpatched Vulnerability : CVE-2026-78124

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - strongswan - None Ubuntu Linux - Memory Leak When Processing Certificates in PKCS7 Containers CVE-2026-78124 Note that Nessus relies on the...

Debian dsa-6487 : charon-cmd - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6487 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6487-1 [email protected] https://www.debian.org/securit...

Linux Distros Unpatched Vulnerability : CVE-2026-78131

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - strongswan - None Ubuntu Linux - Memory Leaks When Parsing Attribute Certificates CVE-2026-78131 Note that Nessus relies on the presence of the...