1618 matches found
GHSA-M7FF-3HM8-6QXH vulnerabilities
Vulnerabilities for packages: strongswan...
GHSA-J4C7-RFXG-2M4P vulnerabilities
Vulnerabilities for packages: strongswan...
CVE-2026-78134 vulnerabilities
Vulnerabilities for packages: strongswan...
SUSE SLES15: strongswan / strongswan-doc / strongswan-hmac / strongswan-ipsec / etc (SUSE-SU-2026:4146-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4146-1 advisory. - CVE-2026-78123: Undefined Memory Access When Handling PKCS7 Containers bsc1276533. - CVE-2026-78124: Memory Leak When Processing...
CVE-2026-35330
CVE-2026-35330 strongSwan EAP-SIM / EAP-AKA 属性解析器存在通过整数下溢导致的预认证堆缓冲区溢出。 描述 src/libsimaka/simakamessage.c:419 中的 parseattributes 读取 TLV 头部，其 length 字节计为 4 字节字。对于 ATRAND / ATENCRDATA 分支： root@kitploit: if hdr-length 4 in.len || in.len type; data = chunkcreatein.ptr + 4, hdr-length 4 - 4; 当 hdr-lengt...
SUSE SLED15: strongswan / strongswan-doc / strongswan-hmac / strongswan-ipsec / etc (SUSE-SU-2026:4115-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4115-1 advisory. - CVE-2026-47895: Double-Free When Destroying Certain Cloned Identities bsc1266360. - CVE-2026-78123: Undefine...
Astra Linux – Vulnerability in StrongSwan
StrongSwan before version 5.9.12 has a buffer overflow vulnerability, and there is a possibility of unauthenticated remote code execution through a DH public key value that exceeds the internal buffer of charon-tkm’s DH proxy. The earliest affected version is 5.3.0. An attack can occur through a...
Security update for strongswan
This update for strongswan fixes the following issues: CVE-2026-78123: Undefined Memory Access When Handling PKCS7 Containers bsc1276533. CVE-2026-78124: Memory Leak When Processing Certificates in PKCS7 Containers bsc1276534. CVE-2026-78126: NULL-Pointer Dereference When Handling...
SUSE-SU-2026:4152-1 Security update for strongswan
This update for strongswan fixes the following issues: - CVE-2026-78123: Undefined Memory Access When Handling PKCS7 Containers bsc1276533. - CVE-2026-78124: Memory Leak When Processing Certificates in PKCS7 Containers bsc1276534. - CVE-2026-78126: NULL-Pointer Dereference When Handling...
Security update for strongswan
This update for strongswan fixes the following issues: CVE-2026-78123: Undefined Memory Access When Handling PKCS7 Containers bsc1276533. CVE-2026-78124: Memory Leak When Processing Certificates in PKCS7 Containers bsc1276534. CVE-2026-78126: NULL-Pointer Dereference When Handling...
SUSE-SU-2026:4147-1 Security update for strongswan
This update for strongswan fixes the following issues: - CVE-2026-78123: Undefined Memory Access When Handling PKCS7 Containers bsc1276533. - CVE-2026-78124: Memory Leak When Processing Certificates in PKCS7 Containers bsc1276534. - CVE-2026-78126: NULL-Pointer Dereference When Handling...
Security update for strongswan
This update for strongswan fixes the following issues: CVE-2026-78123: Undefined Memory Access When Handling PKCS7 Containers bsc1276533. CVE-2026-78124: Memory Leak When Processing Certificates in PKCS7 Containers bsc1276534. CVE-2026-78126: NULL-Pointer Dereference When Handling...
SUSE-SU-2026:4146-1 Security update for strongswan
This update for strongswan fixes the following issues: - CVE-2026-78123: Undefined Memory Access When Handling PKCS7 Containers bsc1276533. - CVE-2026-78124: Memory Leak When Processing Certificates in PKCS7 Containers bsc1276534. - CVE-2026-78126: NULL-Pointer Dereference When Handling...
Security update for strongswan
This update for strongswan fixes the following issues: CVE-2026-78123: Undefined Memory Access When Handling PKCS7 Containers bsc1276533. CVE-2026-78124: Memory Leak When Processing Certificates in PKCS7 Containers bsc1276534. CVE-2026-78126: NULL-Pointer Dereference When Handling...
strongswan-6.1.0-1.1 on GA media (moderate)
strongswan-6.1.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11749-1 Rating: moderate Cross-References: CVE-2026-78123 CVE-2026-78124 CVE-2026-78126 CVE-2026-78127 CVE-2026-78130 CVE-2026-78131 CVE-2026-78133 CVE-2026-78134 CVE-2026-78135 CVSS scores: CVE-2026-78123 SUSE : 7.5...
CVE-2026-25075-check
CVE-2026-25075 漏洞评估工具 安全检测 strongSwan VPN 服务器是否存在 CVE-2026-25075 漏洞，且不会造成任何中断。查看 Bishop Fox 博客的完整分析文章。 描述 CVE-2026-25075 是 strongSwan 的 EAP-TTLS 插件中的一个整数下溢漏洞，允许远程未认证攻击者通过精心构造的 EAP-TTLS 消息使 IKE 守护进程崩溃。该漏洞影响 strongSwan 从 4.5.0 到 6.0.4 的所有版本，涵盖超过 15 年的版本发布。 此工具通过以下步骤执行非破坏性漏洞测试： 1. 使用 EAP-TTLS 认证建立完整...
AZL-100049 CVE-2026-78135 affecting package strongswan 5.9.14-10
libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state machine. Because CREATECHILDSA requests are mishandled, there can be an authentication bypass...
CVE-2026-78135
libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state machine. Because CREATECHILDSA requests are mishandled, there can be an authentication bypass...
DEBIAN-CVE-2026-78135
libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state machine. Because CREATECHILDSA requests are mishandled, there can be an authentication bypass...