Summary
Elliott Childre discovered that strongSwan incorrectly handled the cloning
of certain identities. A remote attacker could use this issue to cause
strongSwan to crash, resulting in a denial of service, or possibly execute
arbitrary code.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | strongswan | 5.9.5-2ubuntu2.7 |
| Ubuntu · 24.04 LTS 24.04:LTS | strongswan | 5.9.13-2ubuntu4.24.04.4 |
| Ubuntu · 25.10 | strongswan | 6.0.1-6ubuntu4.4 |
| Ubuntu · 26.04 LTS 26.04:LTS | strongswan | 6.0.4-1ubuntu3.1 |
References
-
report
https://ubuntu.com/security/CVE-2026-47895