Skip to content
OpenAdvisories
High DSA-6176-1 1 CVE

strongswan - security update

Published Mar 23, 2026 · Updated Mar 23, 2026

Ecosystem: Debian

Fixed packages 2

ReleasePackageFixed in
Debian · 12 strongswan 5.9.8-5+deb12u3
Debian · 13 strongswan 6.0.1-6+deb13u4

Vulnerabilities 1

  • High 7.5
    CVE-2026-25075 Public exploit

    strongSwan 4.5.0 < 6.0.5 EAP-TTLS AVP Parsing Integer Underflow

    strongSwan versions 4.5.0 prior to 6.0.5 contain an integer underflow vulnerability in the EAP-TTLS AVP parser that allows unauthenticated remote attackers to cause a denial of service by sending crafted AVP data with invalid length fields during IKEv2 authen…

    strongSwan strongSwan strongswan strongswan Debian Ubuntu Azure Linux