algo

Algo VPN Algo VPN is a set of Ansible scripts that simplify the setup of a personal WireGuard and IPsec VPN. It uses the most secure defaults available and works with common cloud providers. See our release announcement for more information. Features Supports only IKEv2 with strong crypto AES-GCM...

CVE-2026-25075-check

أداة تقييم الثغرة الأمنية CVE-2026-25075 اكتشف بأمان ما إذا كان خادم strongSwan VPN معرّضًا للثغرة الأمنية CVE-2026-25075 دون التسبب في أي انقطاع. اطّلع على المقال الكامل في مدونة Bishop Fox. الوصف CVE-2026-25075 هي ثغرة تدفّق سفلي صحيح integer underflow في المكوّن الإضافي EAP-TTLS الخاص بـ...

strongswan

إعداد strongSwan نظرة عامة strongSwan هو حل VPN مفتوح المصدر قائم على IPsec. هذه الوثيقة ليست سوى مقدمة قصيرة لأمر strongSwan swanctl الذي يستخدم vici الحديث واجهة إعداد IKE متعددة الاستخدامات. أما الأمر ipsec المُهمل الذي يستخدم واجهة الإعداد القديمة stroke فموصوف هنا. للحصول على معلومات أكثر...

CVE-2026-35333

CVE-2026-35333 strongSwan RADIUS एट्रिब्यूट-इटरेटर प्री-ऑथ अनंत लूप / रिमोट DoS। विवरण attributeenumerate src/libradius/radiusmessage.c:247-271 में उन RADIUS एट्रिब्यूट्स को स्वीकार करता है जिनका length बाइट sizeofrattrt 2 से छोटा है। length == 0 के लिए: data-len = next-length - sizeofrattrt...

CVE-2026-35330

CVE-2026-35330 strongSwan EAP-SIM / EAP-AKA विशेषता पार्सर में पूर्व-प्रमाणीकरण हीप बफर ओवरफ्लो पूर्णांक अंडरफ़्लो के कारण। विवरण src/libsimaka/simakamessage.c:419 में parseattributes TLV हेडर पढ़ता है जिनका length बाइट 4-बाइट शब्दों की गणना करता है। ATRAND / ATENCRDATA शाखा के लिए: if hdr-length...

Astra Linux – Vulnerability in StrongSwan

StrongSwan before version 5.9.12 has a buffer overflow vulnerability, and there is a possibility of unauthenticated remote code execution through a DH public key value that exceeds the internal buffer of charon-tkm’s DH proxy. The earliest affected version is 5.3.0. An attack can occur through a...

[SECURITY] Fedora 45 Update: strongswan-6.1.0-2.fc45

The strongSwan IPsec implementation supports both the IKEv1 and IKEv2 key exchange protocols in conjunction with the native NETKEY IPsec stack of the Linux kernel...

OESA-2026-4071 strongswan security update

The strongSwan IPsec implementation supports both the IKEv1 and IKEv2 key exchange protocols in conjunction with the native NETKEY IPsec stack of the Linux kernel. Security Fixes: In the eap-mschapv2 plugin client-side in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted...

OESA-2026-4070 strongswan security update

The strongSwan IPsec implementation supports both the IKEv1 and IKEv2 key exchange protocols in conjunction with the native NETKEY IPsec stack of the Linux kernel. Security Fixes: In the eap-mschapv2 plugin client-side in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted...

Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : strongSwan vulnerabilities (USN-8789-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8789-1 advisory. It was discovered that strongSwan incorrectly handled PKCS7 containers in the openssl plugin. A remote attacker could possibly us...

USN-8789-1: strongSwan vulnerabilities

It was discovered that strongSwan incorrectly handled PKCS7 containers in the openssl plugin. A remote attacker could possibly use this issue to cause strongSwan to crash, resulting in a denial of service. CVE-2026-78123 It was discovered that strongSwan incorrectly handled memory when enumeratin...

USN-8789-1 strongswan vulnerabilities

It was discovered that strongSwan incorrectly handled PKCS7 containers in the openssl plugin. A remote attacker could possibly use this issue to cause strongSwan to crash, resulting in a denial of service. CVE-2026-78123 It was discovered that strongSwan incorrectly handled memory when enumeratin...

CVE-2026-78131 affecting package strongswan for versions less than 5.9.14-11

CVE-2026-78131 affecting package strongswan for versions less than 5.9.14-11. A patched version of the package is available...

CVE-2026-78135 affecting package strongswan for versions less than 5.9.14-11

CVE-2026-78135 affecting package strongswan for versions less than 5.9.14-11. A patched version of the package is available...

CVE-2026-78127 affecting package strongswan for versions less than 5.9.14-11

CVE-2026-78127 affecting package strongswan for versions less than 5.9.14-11. A patched version of the package is available...

CVE-2026-78123 affecting package strongswan for versions less than 5.9.14-11

CVE-2026-78123 affecting package strongswan for versions less than 5.9.14-11. A patched version of the package is available...

CVE-2026-78130 affecting package strongswan for versions less than 5.9.14-11

CVE-2026-78130 affecting package strongswan for versions less than 5.9.14-11. A patched version of the package is available...

CVE-2026-78126 affecting package strongswan for versions less than 5.9.14-11

CVE-2026-78126 affecting package strongswan for versions less than 5.9.14-11. A patched version of the package is available...

CVE-2026-78129 affecting package strongswan for versions less than 5.9.14-11

CVE-2026-78129 affecting package strongswan for versions less than 5.9.14-11. A patched version of the package is available...

CVE-2026-78132 affecting package strongswan for versions less than 5.9.14-11

CVE-2026-78132 affecting package strongswan for versions less than 5.9.14-11. A patched version of the package is available...