[SECURITY] [DSA 6330-1] strongswan security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6330-1 [email protected] https://www.debian.org/security/ Yves-Alexis Perez June 08, 2026 https://www.debian.org/security/faq -...

Linux Distros Unpatched Vulnerability : CVE-2026-35330

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - strongswan - None Ubuntu Linux - Integer Underflow When Handling EAP-SIM/AKA Attributes CVE-2026-35330 Note that Nessus relies on the presence of...

Linux Distros Unpatched Vulnerability : CVE-2026-35328

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - strongswan - None Ubuntu Linux - Infinite Loop When Handling Supported Versions TLS Extension CVE-2026-35328 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2026-35332

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - strongswan - None Ubuntu Linux - NULL-Pointer Dereference When Handling ECDH Public Value in TLS CVE-2026-35332 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2026-25075

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - strongSwan versions 4.5.0 prior to 6.0.5 contain an integer underflow vulnerability in the EAP-TTLS AVP parser that allows unauthenticated remote attackers to...

ROS-20260122-73-0008

Vulnerability in strongswan related to integer overflow. Exploitation of the vulnerability could allow an attacker to execute arbitrary code...

ALPINE-CVE-2025-62291

In the eap-mschapv2 plugin client-side in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted message of size 6 through 8, and cause an integer underflow that potentially results in a heap-based buffer overflow...

SUSE SLES12 Security Update : strongswan (SUSE-SU-2025:3904-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:3904-1 advisory. - CVE-2025-62291: fixed buffer overflow when handling EAP-MSCHAPv2 failure requests bsc1251941 Tenable has extracted the preceding description block...

SUSE SLES15 Security Update : strongswan (SUSE-SU-2025:3857-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:3857-1 advisory. - CVE-2025-62291: fixed buffer overflow when handling EAP-MSCHAPv2 failure requests bsc1251941 Tenable has extracted the preceding descripti...

Ubuntu: Security Advisory (USN-7841-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-7841-1: strongSwan vulnerability

Xu Biang discovered that the strongSwan client incorrectly handled EAP-MSCHAPv2 failure requests. If a user or automated system were tricked into connecting to a malicious server, a remote attacker could use this issue to cause strongSwan to crash, resulting in a denial of service, or possibly...

EUVD-2010-2632

Malware in sbrugna...

EUVD-2012-2376

Malware in sbrugna...

EUVD-2018-18216

Malware in sbrugna...

EUVD-2018-17158

Malware in sbrugna...

EUVD-2018-8006

Malware in sbrugna...

EUVD-2008-4532

Malware in sbrugna...

EUVD-2009-2654

Malware in sbrugna...

EUVD-2009-1952

Malware in sbrugna...

EUVD-2009-1953

Malware in sbrugna...