1765 matches found
algo
Algo VPN Algo VPN is a set of Ansible scripts that simplify the setup of a personal WireGuard and IPsec VPN. It uses the most secure defaults available and works with common cloud providers. See our release announcement for more information. Features Supports only IKEv2 with strong crypto AES-GCM...
CVE-2026-35333
CVE-2026-35333 strongSwan RADIUS attribute-iterator pre-auth infinite loop / remote DoS. Description attributeenumerate in src/libradius/radiusmessage.c:247-271 accepts RADIUS attributes whose length byte is smaller than sizeofrattrt 2. For length == 0: data-len = next-length - sizeofrattrt...
strongswan
strongSwan Configuration Overview strongSwan is an OpenSource IPsec-based VPN solution. This document is just a short introduction of the strongSwan swanctl command which uses the modern vici Versatile IKE Configuration Interface. The deprecated ipsec command using the legacy stroke configuration...
CVE-2026-35330
CVE-2026-35330 strongSwan EAP-SIM / EAP-AKA attribute parser pre-auth heap buffer overflow via integer underflow. Description parseattributes in src/libsimaka/simakamessage.c:419 reads TLV headers whose length byte counts 4-byte words. For the ATRAND / ATENCRDATA branch: if hdr-length 4 in.len ||...
[SECURITY] Fedora 45 Update: strongswan-6.1.0-2.fc45
The strongSwan IPsec implementation supports both the IKEv1 and IKEv2 key exchange protocols in conjunction with the native NETKEY IPsec stack of the Linux kernel...
CVE-2026-25075-check
CVE-2026-25075 Vulnerability Assessment Tool Safely detect whether a strongSwan VPN server is vulnerable to CVE-2026-25075 without causing any disruption. See the full write-up at the Bishop Fox blog. Description CVE-2026-25075 is an integer underflow vulnerability in strongSwan's EAP-TTLS plugin...
OESA-2026-4071 strongswan security update
The strongSwan IPsec implementation supports both the IKEv1 and IKEv2 key exchange protocols in conjunction with the native NETKEY IPsec stack of the Linux kernel. Security Fixes: In the eap-mschapv2 plugin client-side in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted...
OESA-2026-4070 strongswan security update
The strongSwan IPsec implementation supports both the IKEv1 and IKEv2 key exchange protocols in conjunction with the native NETKEY IPsec stack of the Linux kernel. Security Fixes: In the eap-mschapv2 plugin client-side in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted...
Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : strongSwan vulnerabilities (USN-8789-1)
The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8789-1 advisory. It was discovered that strongSwan incorrectly handled PKCS7 containers in the openssl plugin. A remote attacker could possibly us...
USN-8789-1: strongSwan vulnerabilities
It was discovered that strongSwan incorrectly handled PKCS7 containers in the openssl plugin. A remote attacker could possibly use this issue to cause strongSwan to crash, resulting in a denial of service. CVE-2026-78123 It was discovered that strongSwan incorrectly handled memory when enumeratin...
USN-8789-1 strongswan vulnerabilities
It was discovered that strongSwan incorrectly handled PKCS7 containers in the openssl plugin. A remote attacker could possibly use this issue to cause strongSwan to crash, resulting in a denial of service. CVE-2026-78123 It was discovered that strongSwan incorrectly handled memory when enumeratin...
CVE-2026-78135 affecting package strongswan for versions less than 5.9.14-11
CVE-2026-78135 affecting package strongswan for versions less than 5.9.14-11. A patched version of the package is available...
CVE-2026-78127 affecting package strongswan for versions less than 5.9.14-11
CVE-2026-78127 affecting package strongswan for versions less than 5.9.14-11. A patched version of the package is available...
CVE-2026-78134 affecting package strongswan for versions less than 5.9.14-11
CVE-2026-78134 affecting package strongswan for versions less than 5.9.14-11. A patched version of the package is available...
CVE-2026-78124 affecting package strongswan for versions less than 5.9.14-11
CVE-2026-78124 affecting package strongswan for versions less than 5.9.14-11. A patched version of the package is available...
CVE-2026-78126 affecting package strongswan for versions less than 5.9.14-11
CVE-2026-78126 affecting package strongswan for versions less than 5.9.14-11. A patched version of the package is available...
CVE-2026-78132 affecting package strongswan for versions less than 5.9.14-11
CVE-2026-78132 affecting package strongswan for versions less than 5.9.14-11. A patched version of the package is available...
CVE-2026-78129 affecting package strongswan for versions less than 5.9.14-11
CVE-2026-78129 affecting package strongswan for versions less than 5.9.14-11. A patched version of the package is available...