Summary
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in strongSwan ausnutzen, um einen Denial of Service zu verursachen, Sicherheitsmaßnahmen zu umgehen, Informationen offenzulegen und Code auszuführen.
Product
Strongswan ist eine IPSec-basierte VPN Implementierung.
Vulnerabilities 11
-
High 7.5
strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute certificate parser.
-
High 7.5
strongSwan 5.1.3 through 6.0.7 has an infinite loop in the x509 plugin's attribute certificate parser for ietfAttrSynta…
-
High 7.5
libcharon in strongSwan 6.0.0 through 6.0.7 has a use-after-free in IKEv2 rekeying collision handling.
-
High 7.1
strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins because there can be a…
-
Medium 5.9
strongSwan 5.0.2 through 6.0.7 has an Expired Pointer Dereference in PKCS#7 parsing in the openssl plugin.
-
Medium 5.9
strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka plugin.
-
Medium 5.9
strongSwan 4.6.2 through 6.0.7 has an infinite loop in PKCS#5 decryption.
-
Medium 5.6
libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state machine. Because CREATE_C…
-
Low 3.7
strongSwan 5.0.2 through 6.0.7 allows PKCS#7 certificate enumeration in the openssl plugin that leads to a lack of rele…
-
Low 3.7
libcharon in strongSwan 4.1.2 through 6.0.7 has a missing release of memory after its effective lifetime in the IKE mes…
-
Low 3.7
strongSwan 4.2.0 through 6.0.7 has a missing release of memory after its effective lifetime in the x509 plugin's attrib…
Revision history
-
#9
Neue Updates von Fedora aufgenommen
-
#8
Neue Updates von Debian aufgenommen
-
#7
Neue Updates von SUSE aufgenommen
-
#6
Neue Updates von openSUSE aufgenommen
-
#5
Neue Updates von Fedora aufgenommen
-
#4
Neue Updates von SUSE aufgenommen
-
#3
Neue Updates von openSUSE und SUSE aufgenommen
-
#2
Referenz(en) aufgenommen: EUVD-2026-75903, EUVD-2026-75902, EUVD-2026-75901, EUVD-2026-75900, EUVD-2026-75899, EUVD-2026-75898, EUVD-2026-75920, EUVD-2026-75907, EUVD-2026-75906, EUVD-2026-75904, EUVD-2026-75921
-
#1
Initiale Fassung
References
-
StrongSwan Release Notes vom 2026-09-07
https://www.strongswan.org/blog/2026/09/07/strongswan-6.1.0-released.html
-
StrongSwan Security Advisory vom 2026-09-07
https://www.strongswan.org/blog/2026/09/07/strongswan-vulnerability-%28cve-2026-78123%29.html
-
StrongSwan Security Advisory vom 2026-09-07
https://www.strongswan.org/blog/2026/09/07/strongswan-vulnerability-%28cve-2026-78124%29.html
-
StrongSwan Security Advisory vom 2026-09-07
https://www.strongswan.org/blog/2026/09/07/strongswan-vulnerability-%28cve-2026-78126%29.html
-
StrongSwan Security Advisory vom 2026-09-07
https://www.strongswan.org/blog/2026/09/07/strongswan-vulnerability-%28cve-2026-78127%29.html
-
StrongSwan Security Advisory vom 2026-09-07
https://www.strongswan.org/blog/2026/09/07/strongswan-vulnerability-%28cve-2026-78129%29.html
-
StrongSwan Security Advisory vom 2026-09-07
https://www.strongswan.org/blog/2026/09/07/strongswan-vulnerability-%28cve-2026-78130%29.html
-
StrongSwan Security Advisory vom 2026-09-07
https://www.strongswan.org/blog/2026/09/07/strongswan-vulnerability-%28cve-2026-78131%29.html
-
StrongSwan Security Advisory vom 2026-09-07
https://www.strongswan.org/blog/2026/09/07/strongswan-vulnerability-%28cve-2026-78132%29.html
-
StrongSwan Security Advisory vom 2026-09-07
https://www.strongswan.org/blog/2026/09/07/strongswan-vulnerability-%28cve-2026-78133%29.html
-
StrongSwan Security Advisory vom 2026-09-07
https://www.strongswan.org/blog/2026/09/07/strongswan-vulnerability-%28cve-2026-78134%29.html
-
StrongSwan Security Advisory vom 2026-09-07
https://www.strongswan.org/blog/2026/09/07/strongswan-vulnerability-%28cve-2026-78135%29.html
-
openSUSE Security Update OPENSUSE-SU-2026:11749-1 vom 2026-09-13
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YXFQJZMM6QMFAWMI6CEFO53CF2HQBRLA/
-
SUSE Security Update SUSE-SU-2026:4115-1 vom 2026-09-14
https://lists.suse.com/pipermail/sle-security-updates/2026-September/028999.html
-
SUSE Security Update SUSE-SU-2026:4152-1 vom 2026-09-16
https://lists.suse.com/pipermail/sle-security-updates/2026-September/029044.html
-
SUSE Security Update SUSE-SU-2026:4147-1 vom 2026-09-16
https://lists.suse.com/pipermail/sle-security-updates/2026-September/029049.html
-
SUSE Security Update SUSE-SU-2026:4146-1 vom 2026-09-16
https://lists.suse.com/pipermail/sle-security-updates/2026-September/029050.html
-
SUSE Security Update SUSE-SU-2026:4143-1 vom 2026-09-16
https://lists.suse.com/pipermail/sle-security-updates/2026-September/029053.html
-
Fedora Security Advisory FEDORA-2026-5DB1745C4F vom 2026-09-21
https://bodhi.fedoraproject.org/updates/FEDORA-2026-5db1745c4f
-
openSUSE Security Update OPENSUSE-SU-2026:22050-1 vom 2026-10-18
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZCY4CUG2EBDPV2RAUTO4MD5SYVOLZKCT/
-
SUSE Security Update SUSE-SU-2026:24199-1 vom 2026-10-20
https://lists.suse.com/pipermail/sle-security-updates/2026-October/029958.html
-
Debian Security Advisory DLA-4879 vom 2026-11-02
https://lists.debian.org/debian-lts-announce/2026/11/msg00003.html
-
Fedora Security Advisory FEDORA-2026-357D4A65D4 vom 2026-11-09
https://bodhi.fedoraproject.org/updates/FEDORA-2026-357d4a65d4
-
Fedora Security Advisory FEDORA-2026-BF0E682C10 vom 2026-11-09
https://bodhi.fedoraproject.org/updates/FEDORA-2026-bf0e682c10