Skip to content
OpenAdvisories
High DLA-4512-1 1 CVE

strongswan - security update

Published Mar 27, 2026 · Updated Mar 27, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 11 strongswan 5.9.1-1+deb11u6

Vulnerabilities 1

  • High 7.5
    CVE-2026-25075 Public exploit

    strongSwan 4.5.0 < 6.0.5 EAP-TTLS AVP Parsing Integer Underflow

    strongSwan versions 4.5.0 prior to 6.0.5 contain an integer underflow vulnerability in the EAP-TTLS AVP parser that allows unauthenticated remote attackers to cause a denial of service by sending crafted AVP data with invalid length fields during IKEv2 authen…

    strongSwan strongSwan strongswan strongswan Debian Ubuntu Azure Linux