CVE-2026-78133

libcharon in strongSwan 6.0.0 through 6.0.7 has a use-after-free in IKEv2 rekeying collision handling...

DEBIAN-CVE-2026-78133

libcharon in strongSwan 6.0.0 through 6.0.7 has a use-after-free in IKEv2 rekeying collision handling...

AZL-101829 CVE-2026-78133 affecting package strongswan 5.9.14-11

libcharon in strongSwan 6.0.0 through 6.0.7 has a use-after-free in IKEv2 rekeying collision handling...

CVE-2026-78133

libcharon in strongSwan 6.0.0 through 6.0.7 has a use-after-free in IKEv2 rekeying collision handling...

CVE-2026-78133

libcharon in strongSwan 6.0.0 through 6.0.7 has a use-after-free in IKEv2 rekeying collision handling...

CVE-2026-78133

libcharon in strongSwan 6.0.0 through 6.0.7 has a use-after-free in IKEv2 rekeying collision handling...

CVE-2026-78133

libcharon in strongSwan 6.0.0 through 6.0.7 has a use-after-free in IKEv2 rekeying collision handling...

CVE-2026-78133

libcharon in strongSwan 6.0.0 through 6.0.7 has a use-after-free in IKEv2 rekeying collision handling...

CVE-2026-78133

CVE-2026-78133 is a use-after-free vulnerability in libcharon , the core component of strongSwan (versions 6.0.0 through 6.0.7), triggered during IKEv2 rekeying collision handling . According to the Debian security advisory, this can lead to remote code execution . The CVSS 3.1 base score is 7.5 ...

EUVD-2026-75907

libcharon in strongSwan 6.0.0 through 6.0.7 has a use-after-free in IKEv2 rekeying collision handling...

CVE-2026-78133: Use After Free

libcharon in strongSwan 6.0.0 through 6.0.7 has a use-after-free in IKEv2 rekeying collision handling...

PT-2026-89739

Name of the Vulnerable Software and Affected Versions strongSwan versions 6.0.0 through 6.0.7 Description The libcharon component contains a use-after-free flaw during IKEv2 rekeying collision handling. A use-after-free occurs when an application continues to use a pointer after it has been freed...

GPS As a Key Distribution Platform

This is interesting: The U.S. military has likely been quietly broadcasting codes for its global encryption network using public GPS for nearly 20 years, turning each satellite into a hidden "numbers station," according to Steven Murdoch… That means every device that uses GPS has been receiving...

MiracleLinux 9 : libssh-0.10.4-11.el9 (AXSA:2023-6991:04)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-6991:04 advisory. libssh: NULL pointer dereference during rekeying with algorithm guessing CVE-2023-1667 libssh: authorization bypass in pkiverifydatasignature...

MiracleLinux 8 : libssh-0.9.6-10.el8 (AXSA:2023-6150:03)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-6150:03 advisory. libssh: NULL pointer dereference during rekeying with algorithm guessing CVE-2023-1667 libssh: authorization bypass in pkiverifydatasignature...

MiracleLinux 8 : libssh-0.9.6-3.el8 (AXSA:2022-3399:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2022-3399:01 advisory. libssh: possible heap-based buffer overflow when rekeying CVE-2021-3634 Tenable has extracted the preceding description block directly from the MiracleLinux...

CVE-2025-9614

CVE-2025-9614 identifies a vulnerability in the PCI Express (PCIe) Integrity and Data Encryption (IDE) specification. The root cause is insufficient guidance on re-keying and stream flushing during device rebinding, which may allow stale write transactions from a previous security context to be p...

PCI-SIG PCI Express Integrity and Data Encryption 安全漏洞

PCI-SIG PCI Express Integrity and Data Encryption is a data encryption software from PCI-SIG, USA. A security vulnerability exists in PCI-SIG PCI Express Integrity and Data Encryption that stems from insufficient re-keying and stream refresh guidance during device rebinding, which could result in...

EUVD-2014-2375

Malware in sbrugna...

Oracle Linux 9 : gnutls (ELSA-2025-20606)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20606 advisory. 3.8.3-6.2fips - Add FIPS package change: add fips suffix to Release and set Epoch to 10 Orabug: 35925409 - Update FIPS module name for Oracle Linux...