1777 matches found
strongswan
strongSwan Configuration Overview strongSwan is an OpenSource IPsec-based VPN solution. This document is just a short introduction of the strongSwan swanctl command which uses the modern vici Versatile IKE Configuration Interface. The deprecated ipsec command using the legacy stroke configuration...
algo
Algo VPN Algo VPN is a set of Ansible scripts that simplify the setup of a personal WireGuard and IPsec VPN. It uses the most secure defaults available and works with common cloud providers. See our release announcement for more information. Features Supports only IKEv2 with strong crypto AES-GCM...
CVE-2026-25075-check
CVE-2026-25075 Vulnerability Assessment Tool Safely detect whether a strongSwan VPN server is vulnerable to CVE-2026-25075 without causing any disruption. See the full write-up at the Bishop Fox blog. Description CVE-2026-25075 is an integer underflow vulnerability in strongSwan's EAP-TTLS plugin...
CVE-2026-35333
CVE-2026-35333 strongSwan RADIUS attribute-iterator pre-auth infinite loop / remote DoS. Description attributeenumerate in src/libradius/radiusmessage.c:247-271 accepts RADIUS attributes whose length byte is smaller than sizeofrattrt 2. For length == 0: data-len = next-length - sizeofrattrt...
CVE-2026-35330
CVE-2026-35330 strongSwan EAP-SIM / EAP-AKA attribute parser pre-auth heap buffer overflow via integer underflow. Description parseattributes in src/libsimaka/simakamessage.c:419 reads TLV headers whose length byte counts 4-byte words. For the ATRAND / ATENCRDATA branch: if hdr-length 4 in.len ||...
Astra Linux – Vulnerability in StrongSwan
StrongSwan before version 5.9.12 has a buffer overflow vulnerability, and there is a possibility of unauthenticated remote code execution through a DH public key value that exceeds the internal buffer of charon-tkm’s DH proxy. The earliest affected version is 5.3.0. An attack can occur through a...
Updated strongswan packages fix security vulnerabilities
Please see the links for aditional information about the vulnerabilities...
MGASA-2026-0490 Updated strongswan packages fix security vulnerabilities
Please see the links for aditional information about the vulnerabilities...
Rocky Linux 8.6 [CIQ] Security Update: perl-vici / python3-vici / strongswan / strongswan-charon-nm / etc Multiple Vulnerabilities (ciqsa-2026_1607)
The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261607 advisory. This advisory aggregates security fixes for the strongswan SRPM in CIQ LTS 8.6. It addresses 12 CVEs: CVE-2018-16152, CVE-2018-16151, CVE-2013-2944,...
Astra Linux – Vulnerability in StrongSwan
Before version 5.9.8, StrongSwan allowed remote attackers to cause a denial of service in the revocation plugin by sending a crafted end-entity and intermediate CA certificate that contained a CRL/OCSP URL pointing to a server under the attacker’s control that did not respond properly. In some...
[SECURITY] Fedora 45 Update: strongswan-6.1.0-2.fc45
The strongSwan IPsec implementation supports both the IKEv1 and IKEv2 key exchange protocols in conjunction with the native NETKEY IPsec stack of the Linux kernel...
OESA-2026-4071 strongswan security update
The strongSwan IPsec implementation supports both the IKEv1 and IKEv2 key exchange protocols in conjunction with the native NETKEY IPsec stack of the Linux kernel. Security Fixes: In the eap-mschapv2 plugin client-side in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted...
OESA-2026-4070 strongswan security update
The strongSwan IPsec implementation supports both the IKEv1 and IKEv2 key exchange protocols in conjunction with the native NETKEY IPsec stack of the Linux kernel. Security Fixes: In the eap-mschapv2 plugin client-side in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted...
Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : strongSwan vulnerabilities (USN-8789-1)
The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8789-1 advisory. It was discovered that strongSwan incorrectly handled PKCS7 containers in the openssl plugin. A remote attacker could possibly us...
USN-8789-1 strongswan vulnerabilities
It was discovered that strongSwan incorrectly handled PKCS7 containers in the openssl plugin. A remote attacker could possibly use this issue to cause strongSwan to crash, resulting in a denial of service. CVE-2026-78123 It was discovered that strongSwan incorrectly handled memory when enumeratin...
USN-8789-1: strongSwan vulnerabilities
It was discovered that strongSwan incorrectly handled PKCS7 containers in the openssl plugin. A remote attacker could possibly use this issue to cause strongSwan to crash, resulting in a denial of service. CVE-2026-78123 It was discovered that strongSwan incorrectly handled memory when enumeratin...
CVE-2026-78135 affecting package strongswan for versions less than 5.9.14-11
CVE-2026-78135 affecting package strongswan for versions less than 5.9.14-11. A patched version of the package is available...
CVE-2026-78123 affecting package strongswan for versions less than 5.9.14-11
CVE-2026-78123 affecting package strongswan for versions less than 5.9.14-11. A patched version of the package is available...