63 matches found
[SECURITY] [DLA 4879-1] strongswan security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4879-1 [email protected] https://www.debian.org/lts/security/ Simon Quigley November 02, 2026 https://wiki.debian.org/LTS -...
Debian dla-4879 : charon-cmd - security update
The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4879 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4879-1 [email protected]...
Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : strongSwan vulnerabilities (USN-8789-1)
The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8789-1 advisory. It was discovered that strongSwan incorrectly handled PKCS7 containers in the openssl plugin. A remote attacker could possibly us...
AZL-100046 CVE-2026-78132 affecting package strongswan for versions less than 5.9.14-11
strongSwan 5.1.3 through 6.0.7 has an infinite loop in the x509 plugin's attribute certificate parser for ietfAttrSyntax...
CVE-2026-78130
strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute certificate parser...
CVE-2026-78131
strongSwan 4.2.0 through 6.0.7 has a missing release of memory after its effective lifetime in the x509 plugin's attribute certificate parser...
DEBIAN-CVE-2026-78130
strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute certificate parser...
AZL-100031 CVE-2026-78131 affecting package strongswan for versions less than 5.9.14-11
strongSwan 4.2.0 through 6.0.7 has a missing release of memory after its effective lifetime in the x509 plugin's attribute certificate parser...
AZL-100028 CVE-2026-78130 affecting package strongswan for versions less than 5.9.14-11
strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute certificate parser...
CVE-2026-78132
strongSwan 5.1.3 through 6.0.7 has an infinite loop in the x509 plugin's attribute certificate parser for ietfAttrSyntax...
DEBIAN-CVE-2026-78131
strongSwan 4.2.0 through 6.0.7 has a missing release of memory after its effective lifetime in the x509 plugin's attribute certificate parser...
DEBIAN-CVE-2026-78132
strongSwan 5.1.3 through 6.0.7 has an infinite loop in the x509 plugin's attribute certificate parser for ietfAttrSyntax...
CVE-2026-78132
strongSwan 5.1.3 through 6.0.7 has an infinite loop in the x509 plugin's attribute certificate parser for ietfAttrSyntax...
CVE-2026-78132
strongSwan versions 5.1.3 through 6.0.7 contain an infinite loop vulnerability in the x509 plugin when parsing the ietfAttrSyntax ASN.1 type in X.509 attribute certificates, leading to a denial of service . The CVSS 3.1 score is 7.5 (High) with a network attack vector requiring no authentication ...
CVE-2026-78132
strongSwan 5.1.3 through 6.0.7 has an infinite loop in the x509 plugin's attribute certificate parser for ietfAttrSyntax...
CVE-2026-78132
strongSwan 5.1.3 through 6.0.7 has an infinite loop in the x509 plugin's attribute certificate parser for ietfAttrSyntax...
CVE-2026-78132
strongSwan 5.1.3 through 6.0.7 has an infinite loop in the x509 plugin's attribute certificate parser for ietfAttrSyntax...
CVE-2026-78132
strongSwan 5.1.3 through 6.0.7 has an infinite loop in the x509 plugin's attribute certificate parser for ietfAttrSyntax...
