CVE-2023-26463

CVE-2023-26463 affects strongSwan 5.9.8 and 5.9.9, with a root cause in the function using a single variable named “public” for two distinct purposes. This leads to initial access control issues and a later expired pointer Dereference, enabling remote code execution when a client presents an untr...

CVE-2023-26463

strongSwan 5.9.8 and 5.9.9 potentially allows remote code execution because it uses a variable named "public" for two different purposes within the same function. There is initially incorrect access control, later followed by an expired pointer dereference. One attack vector is sending an untrust...

Critical Photon OS Security Update - PHSA-2023-4.0-0366

Updates of 'strongswan' packages of Photon OS have been released...

CBL Mariner 2.0 Security Update: strongswan (CVE-2022-40617)

The version of strongswan installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-40617 advisory. - strongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation plugin by...

Fedora: Security Advisory for strongswan (FEDORA-2023-9fb10d880d)

The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for strongswan (FEDORA-2023-25800591ef)

The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 37 Update: strongswan-5.9.10-1.fc37

The strongSwan IPsec implementation supports both the IKEv1 and IKEv2 key exchange protocols in conjunction with the native NETKEY IPsec stack of the Linux kernel...

[SECURITY] Fedora 38 Update: strongswan-5.9.10-1.fc38

The strongSwan IPsec implementation supports both the IKEv1 and IKEv2 key exchange protocols in conjunction with the native NETKEY IPsec stack of the Linux kernel...

Fedora 37 : strongswan (2023-25800591ef)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-25800591ef advisory. Update to 5.9.10 for CVE-2023-26463 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has no...

Fedora 38 : strongswan (2023-9fb10d880d)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-9fb10d880d advisory. Update to 5.9.10 for CVE-2023-26463 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has no...

Denial Of Service (DoS)

strongswan is vulnerable to Denial of Service DoS. The vulnerability occurs due to certificate verification in TLS-based EAP methods which maybe exploited by an attacker to carry out a denial of service or possibly remote code execution as well...

Debian: Security Advisory (DLA-244-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-345-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE CVE-2023-26463

strongSwan 5.9.8 and 5.9.9 potentially allows remote code execution because it uses a variable named "public" for two different purposes within the same function. There is initially incorrect access control, later followed by an expired pointer dereference. One attack vector is sending an untrust...

FreeBSD : strongSwan -- certificate verification vulnerability (3f9b6943-ba58-11ed-bbbd-00e0670f2660)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 3f9b6943-ba58-11ed-bbbd-00e0670f2660 advisory. - strongSwan reports: A vulnerability related to certificate verification in TLS-based EAP methods was...

PT-2023-2354 · Unknown +2 · Strongswan +2

Name of the Vulnerable Software and Affected Versions: strongSwan versions 5.9.8 through 5.9.9 Description: The issue is related to incorrect access control and an expired pointer dereference due to the use of a variable named public for two different purposes within the same function. This can...

CVE-2023-26463

strongSwan 5.9.8 and 5.9.9 potentially allows remote code execution because it uses a variable named "public" for two different purposes within the same function. There is initially incorrect access control, later followed by an expired pointer dereference. One attack vector is sending an untrust...

CVE-2022-40617 affecting package strongswan 5.7.2-5

CVE-2022-40617 affecting package strongswan 5.7.2-5. A patched version of the package is available...

strongSwan -- certificate verification vulnerability

strongSwan reports: A vulnerability related to certificate verification in TLS-based EAP methods was discovered in strongSwan that results in a denial of service but possibly even remote code execution. Versions 5.9.8 and 5.9.9 may be affected...

SUSE CVE-2004-0590

FreeS/WAN 1.x and 2.x, and other related products including superfreeswan 1.x, openswan 1.x before 1.0.6, openswan 2.x before 2.1.4, and strongSwan before 2.1.3, allows remote attackers to authenticate using spoofed PKCS7 certificates in which a self-signed certificate identifies an alternate...