Skip to content
OpenAdvisories
High USN-8117-1 1 CVE

strongswan vulnerability

Published Mar 23, 2026 · Updated Apr 27, 2026

Ecosystem: Ubuntu

Summary

Kazuma Matsumoto discovered that strongSwan incorrectly handled EAP-TTLS
AVPs when using the eap-ttls plugin. An attacker could possibly use this
issue to cause strongSwan to consume resources and crash, resulting in a
denial of service.

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 22.04 LTS 22.04:LTS strongswan 5.9.5-2ubuntu2.5
Ubuntu · 24.04 LTS 24.04:LTS strongswan 5.9.13-2ubuntu4.24.04.2
Ubuntu · 25.10 strongswan 6.0.1-6ubuntu4.2

Vulnerabilities 1

  • High 7.5
    CVE-2026-25075 Public exploit

    strongSwan 4.5.0 < 6.0.5 EAP-TTLS AVP Parsing Integer Underflow

    strongSwan versions 4.5.0 prior to 6.0.5 contain an integer underflow vulnerability in the EAP-TTLS AVP parser that allows unauthenticated remote attackers to cause a denial of service by sending crafted AVP data with invalid length fields during IKEv2 authen…

    strongSwan strongSwan strongswan strongswan Debian Ubuntu Azure Linux

References

  • report
    https://ubuntu.com/security/CVE-2026-25075