CVE-2026-47895
In strongSwan before 6.0.7, identity parsing/cloning is mishandled. Parsed EAP-Identities that...
In strongSwan before 6.0.7, identity parsing/cloning is mishandled. Parsed EAP-Identities that result in an empty but non-NULL encoding are not correctly cloned and trigger a double-free once the duplicates are destroyed.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
In strongSwan before 6.0.7, identity parsing/cloning is mishandled. Parsed EAP-Identities that result in an empty but non-NULL encoding are not correctly cloned and trigger a double-free once the duplicates are destroyed.
- Record
CVE-2026-47895- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-415
- Updated
- 2026-11-02
EUVDEUVD-2026-64602
In strongSwan before 6.0.7, identity parsing/cloning is mishandled. Parsed EAP-Identities that result in an empty but non-NULL encoding are not correctly cloned and trigger a double-free once the duplicates are destroyed.
- Record
EUVD-2026-64602- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-55p5-7gvc-767j
In strongSwan before 6.0.7, identity parsing/cloning is mishandled. Parsed EAP-Identities that...
In strongSwan before 6.0.7, identity parsing/cloning is mishandled. Parsed EAP-Identities that result in an empty but non-NULL encoding are not correctly cloned and trigger a double-free once the duplicates are destroyed.
- Record
GHSA-55p5-7gvc-767j- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-415
- Updated
- 2026-11-02
NVD
In strongSwan before 6.0.7, identity parsing/cloning is mishandled. Parsed EAP-Identities that result in an empty but non-NULL encoding are not correctly cloned and trigger a double-free once the duplicates are destroyed.
- Record
CVE-2026-47895- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-415
- Updated
- 2026-11-02
OSVALPINE-CVE-2026-47895
In strongSwan before 6.0.7, identity parsing/cloning is mishandled. Parsed EAP-Identities that result in an empty but non-NULL encoding are not correctly cloned and trigger a double-free once the duplicates are destroyed.
- Record
ALPINE-CVE-2026-47895- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSV
In strongSwan before 6.0.7, identity parsing/cloning is mishandled. Parsed EAP-Identities that result in an empty but non-NULL encoding are not correctly cloned and trigger a double-free once the duplicates are destroyed.
- Record
CVE-2026-47895- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-415
- Updated
- 2026-11-02
Show 12 moreShow less
OSVDEBIAN-CVE-2026-47895
In strongSwan before 6.0.7, identity parsing/cloning is mishandled. Parsed EAP-Identities that result in an empty but non-NULL encoding are not correctly cloned and trigger a double-free once the duplicates are destroyed.
- Record
DEBIAN-CVE-2026-47895- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2026-47895
In strongSwan before 6.0.7, identity parsing/cloning is mishandled. Parsed EAP-Identities that result in an empty but non-NULL encoding are not correctly cloned and trigger a double-free once the duplicates are destroyed.
- Record
UBUNTU-CVE-2026-47895- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVAZL-97377 No score
CVE-2026-47895 affecting package strongswan for versions less than 5.9.14-10
In strongSwan before 6.0.7, identity parsing/cloning is mishandled. Parsed EAP-Identities that result in an empty but non-NULL encoding are not correctly cloned and trigger a double-free once the duplicates are destroyed.
- Record
AZL-97377- Updated
- 2026-11-05
OSVMGASA-2026-0490 No score
Updated strongswan packages fix security vulnerabilities
Please see the links for aditional information about the vulnerabilities.
- Record
MGASA-2026-0490- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:11005-1 No score
strongswan-6.0.7-1.1 on GA media
These are all security issues fixed in the strongswan-6.0.7-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2026:11005-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:21092-1 No score
Security update for strongswan
This update for strongswan fixes the following issue
- CVE-2026-47895: Double-Free When Destroying Certain Cloned Identities (bsc#1266360).
- Record
openSUSE-SU-2026:21092-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:22168-1 No score
Security update for strongswan
This update for strongswan fixes the following issue
- CVE-2026-47895: Double-Free When Destroying Certain Cloned Identities (bsc#1266360).
- Record
SUSE-SU-2026:22168-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:2312-1 No score
Security update for strongswan
This update for strongswan fixes the following issue
- CVE-2026-47895: double-free when destroying certain cloned identities (bsc#1266360).
- Record
SUSE-SU-2026:2312-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:2368-1 No score
Security update for strongswan
This update for strongswan fixes the following issues
- CVE-2026-35328: infinite loop when handling supported versions TLS extension (bsc#1261712).
- CVE-2026-35329: null pointer dereference when processing padding in PKCS#7 (bsc#1261717).
- CVE-2026-35330: integer underflow when handling EAP-SIM/AKA attributes (bsc#1261705).
- CVE-2026-35331: accepting certificates violating name constraints (bsc#1261718).
- CVE-2026-35332: null pointer dereference when handling ECDH public value in TLS (bsc#1261708).
- CVE-2026-35333: integer underflow when handling RADIUS attributes (bsc#1261706).
- CVE-2026-35334: possible null pointer dereference in RSA decryption (bsc#1261720).
- CVE-2026-47895: double-free when destroying certain cloned identities (bsc#1266360).
- Record
SUSE-SU-2026:2368-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:2459-1 No score
Security update for strongswan
This update for strongswan fixes the following issues
- CVE-2026-35328: infinite loop when handling supported versions TLS extension (bsc#1261712).
- CVE-2026-35329: null pointer dereference when processing padding in PKCS#7 (bsc#1261717).
- CVE-2026-35330: integer underflow when handling EAP-SIM/AKA attributes (bsc#1261705).
- CVE-2026-35331: accepting certificates violating name constraints (bsc#1261718).
- CVE-2026-35332: null pointer dereference when handling ECDH public value in TLS (bsc#1261708).
- CVE-2026-35333: integer underflow when handling RADIUS attributes (bsc#1261706).
- CVE-2026-35334: possible null pointer dereference in RSA decryption (bsc#1261720).
- CVE-2026-47895: double-free when destroying certain cloned identities (bsc#1266360).
- Record
SUSE-SU-2026:2459-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:4115-1 No score
Security update for strongswan
This update for strongswan fixes the following issues:
- CVE-2026-47895: Double-Free When Destroying Certain Cloned Identities (bsc#1266360).
- CVE-2026-78123: Undefined Memory Access When Handling PKCS#7 Containers (bsc#1276533).
- CVE-2026-78124: Memory Leak When Processing Certificates in PKCS#7 Containers (bsc#1276534).
- CVE-2026-78126: NULL-Pointer Dereference When Handling AKA-Synchronization-Failure (bsc#1276536).
- CVE-2026-78127: Memory Leak During Message Stringification (bsc#1276539).
- CVE-2026-78129: Unbounded Iteration When Decrypting PKCS#7 Containers (bsc#1276540).
- CVE-2026-78130: NULL-Pointer Dereference in Attribute Certificate Validation (bsc#1276541).
- CVE-2026-78131: Memory Leaks When Parsing Attribute Certificates (bsc#1276543).
- CVE-2026-78132: Infinite Loop When Parsing Attribute Certificates (bsc#1276544).
- CVE-2026-78134: Missing Inner EAP Method Authentication Details (bsc#1276548).
- CVE-2026-78135: Creation of a Child SA Pre-Authentication (bsc#1276549).
- Record
SUSE-SU-2026:4115-1- Updated
- 2026-11-02
OSVUSN-8407-1 No score
strongswan vulnerability
Elliott Childre discovered that strongSwan incorrectly handled the cloning of certain identities. A remote attacker could use this issue to cause strongSwan to crash, resulting in a denial of service, or possibly execute arbitrary code.
- Record
USN-8407-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
strongswanAlpine:v3.24 |
before 6.0.7-r0 | 6.0.7-r0 |
strongswanAzure Linux:3 |
before 5.9.14-10 | 5.9.14-10 |
strongswanDebian:12 |
before 5.9.8-5+deb12u5, plus listed versions 5.9.8-55.9.8-5+deb12u15.9.8-5+deb12u25.9.8-5+deb12u35.9.8-5+deb12u4 |
5.9.8-5+deb12u5 |
strongswanDebian:13 |
before 6.0.1-6+deb13u6, plus listed versions 6.0.1-66.0.1-6+deb13u16.0.1-6+deb13u26.0.1-6+deb13u46.0.1-6+deb13u5 |
6.0.1-6+deb13u6 |
strongswanDebian:14 |
before 6.0.7-1, plus listed versions 6.0.1-66.0.2-16.0.3-16.0.4-16.0.5-16.0.6-1 |
6.0.7-1 |
strongswanMageia:10 From an advisory covering 13 CVEs |
before 6.1.0-1.mga10 | 6.1.0-1.mga10 |
strongswanSUSE:Linux Enterprise Server 16.0 |
before 6.0.6-160000.2.1 | 6.0.6-160000.2.1 |
strongswanSUSE:Linux Enterprise Server for SAP applications 16.0 |
before 6.0.6-160000.2.1 | 6.0.6-160000.2.1 |
strongswanSUSE:Linux Enterprise Server 12 SP5-LTSS |
before 5.1.3-26.38.1 | 5.1.3-26.38.1 |
strongswanSUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 |
before 5.1.3-26.38.1 | 5.1.3-26.38.1 |
Show 29 moreShow less
| Package | Affected | Fixed |
|---|---|---|
strongswanSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 8 CVEs |
before 5.9.11-150400.19.35.1 | 5.9.11-150400.19.35.1 |
strongswanSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 8 CVEs |
before 5.9.11-150400.19.35.1 | 5.9.11-150400.19.35.1 |
strongswanSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 8 CVEs |
before 5.9.11-150400.19.35.1 | 5.9.11-150400.19.35.1 |
strongswanSUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 8 CVEs |
before 5.9.11-150400.19.35.1 | 5.9.11-150400.19.35.1 |
strongswanSUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 8 CVEs |
before 5.9.11-150500.5.23.2 | 5.9.11-150500.5.23.2 |
strongswanSUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 8 CVEs |
before 5.9.11-150500.5.23.2 | 5.9.11-150500.5.23.2 |
strongswanSUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 8 CVEs |
before 5.9.11-150500.5.23.2 | 5.9.11-150500.5.23.2 |
strongswanSUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 8 CVEs |
before 5.9.11-150500.5.23.2 | 5.9.11-150500.5.23.2 |
strongswanSUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 11 CVEs |
before 5.9.14-150700.3.21.2 | 5.9.14-150700.3.21.2 |
strongswanSUSE:Linux Enterprise Module for Package Hub 15 SP7 From an advisory covering 11 CVEs |
before 5.9.14-150700.3.21.2 | 5.9.14-150700.3.21.2 |
strongswanSUSE:Linux Enterprise Workstation Extension 15 SP7 From an advisory covering 11 CVEs |
before 5.9.14-150700.3.21.2 | 5.9.14-150700.3.21.2 |
strongswanUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 4.6.4-95.1.0-25.1.0-35.1.1-0ubuntu15.1.1-0ubuntu2 Show 25 moreShow less5.1.1-0ubuntu35.1.1-0ubuntu45.1.1-0ubuntu55.1.1-0ubuntu75.1.1-0ubuntu145.1.1-0ubuntu175.1.2~dr3+git20130120-0ubuntu25.1.2~dr3+git20130120-0ubuntu35.1.2~rc1-0ubuntu35.1.2~rc1-0ubuntu45.1.2~rc2-0ubuntu25.1.2-0ubuntu15.1.2-0ubuntu25.1.2-0ubuntu2.25.1.2-0ubuntu2.35.1.2-0ubuntu2.45.1.2-0ubuntu2.55.1.2-0ubuntu2.65.1.2-0ubuntu2.75.1.2-0ubuntu2.85.1.2-0ubuntu2.105.1.2-0ubuntu2.115.1.2-0ubuntu2.11+esm15.1.2-0ubuntu2.11+esm25.1.2-0ubuntu2.11+esm3 |
None known |
strongswanUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 5.1.2-0ubuntu65.1.2-0ubuntu75.1.2-0ubuntu85.3.5-1ubuntu15.3.5-1ubuntu2 Show 12 moreShow less5.3.5-1ubuntu35.3.5-1ubuntu3.15.3.5-1ubuntu3.25.3.5-1ubuntu3.35.3.5-1ubuntu3.45.3.5-1ubuntu3.55.3.5-1ubuntu3.75.3.5-1ubuntu3.85.3.5-1ubuntu3.8+esm15.3.5-1ubuntu3.8+esm25.3.5-1ubuntu3.8+esm35.3.5-1ubuntu3.8+esm4 |
None known |
strongswanUbuntu:Pro:FIPS-updates:16.04:LTS |
All versions, plus listed versions 5.3.5-1ubuntu3.fips.3.4.15.3.5-1ubuntu3.fips.3.4.25.3.5-1ubuntu3.fips.3.8.15.3.5-1ubuntu3.fips.3.8.25.3.5-1ubuntu3.fips.3.8.35.3.5-1ubuntu3.fips.3.8.65.3.5-1ubuntu3.fips.3.8.7 |
None known |
strongswanUbuntu:Pro:FIPS:16.04:LTS |
All versions, plus listed versions 5.3.5-1ubuntu3.fips.3.15.3.5-1ubuntu3.fips.3.25.3.5-1ubuntu3.fips.3.3 |
None known |
strongswanUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 5.5.1-4ubuntu25.5.1-4ubuntu35.6.1-2ubuntu15.6.1-2ubuntu25.6.1-2ubuntu3 Show 11 moreShow less5.6.1-2ubuntu45.6.2-1ubuntu25.6.2-1ubuntu2.25.6.2-1ubuntu2.35.6.2-1ubuntu2.45.6.2-1ubuntu2.55.6.2-1ubuntu2.65.6.2-1ubuntu2.75.6.2-1ubuntu2.85.6.2-1ubuntu2.95.6.2-1ubuntu2.9+esm1 |
None known |
strongswanUbuntu:Pro:FIPS-updates:18.04:LTS |
All versions, plus listed versions 5.6.2-1ubuntu2.fips.2.5.15.6.2-1ubuntu2.fips.2.7.15.6.2-1ubuntu2.fips.2.7.25.6.2-1ubuntu2.fips.2.8.15.6.2-1ubuntu2.fips.2.95.6.2-1ubuntu2.fips.2.9+esm1 |
None known |
strongswanUbuntu:Pro:FIPS:18.04:LTS |
All versions, plus listed versions 5.6.2-1ubuntu2.fips.2.4.25.6.2-1ubuntu2.fips.2.5.1 |
None known |
strongswanUbuntu:20.04:LTS |
All versions, plus listed versions 5.7.2-1ubuntu35.8.1-1ubuntu15.8.2-1ubuntu15.8.2-1ubuntu25.8.2-1ubuntu3 Show 6 moreShow less5.8.2-1ubuntu3.15.8.2-1ubuntu3.25.8.2-1ubuntu3.35.8.2-1ubuntu3.45.8.2-1ubuntu3.55.8.2-1ubuntu3.6 |
None known |
strongswanUbuntu:Pro:FIPS-updates:20.04:LTS |
All versions, plus listed versions 5.8.2-1ubuntu3.fips.3.1.25.8.2-1ubuntu3.fips.3.3.15.8.2-1ubuntu3.fips.3.4.15.8.2-1ubuntu3.fips.3.55.8.2-1ubuntu3.fips.3.6 |
None known |
strongswanUbuntu:Pro:FIPS:20.04:LTS |
All versions, plus listed versions 5.8.2-1ubuntu3.fips.3.1.2 |
None known |
strongswanUbuntu:22.04:LTS |
before 5.9.5-2ubuntu2.7, plus listed versions 5.9.1-1ubuntu35.9.1-1ubuntu3.15.9.4-1ubuntu15.9.4-1ubuntu25.9.4-1ubuntu3 Show 9 moreShow less5.9.4-1ubuntu45.9.5-2ubuntu15.9.5-2ubuntu25.9.5-2ubuntu2.15.9.5-2ubuntu2.25.9.5-2ubuntu2.35.9.5-2ubuntu2.45.9.5-2ubuntu2.55.9.5-2ubuntu2.6 |
5.9.5-2ubuntu2.7 |
strongswanUbuntu:Pro:FIPS-preview:22.04:LTS |
All versions, plus listed versions 5.9.5-2ubuntu2.1+Fips15.9.5-2ubuntu2.2+Fips1 |
None known |
strongswanUbuntu:Pro:FIPS-updates:22.04:LTS |
before 5.9.5-2ubuntu2.7+Fips1, plus listed versions 5.9.5-2ubuntu2.1+Fips15.9.5-2ubuntu2.2+Fips15.9.5-2ubuntu2.3+Fips15.9.5-2ubuntu2.4+Fips15.9.5-2ubuntu2.5+Fips15.9.5-2ubuntu2.6+Fips1 |
5.9.5-2ubuntu2.7+Fips1 |
strongswanUbuntu:24.04:LTS |
before 5.9.13-2ubuntu4.24.04.4, plus listed versions 5.9.11-1ubuntu15.9.11-1ubuntu25.9.12-1ubuntu15.9.13-2ubuntu15.9.13-2ubuntu3 Show 4 moreShow less5.9.13-2ubuntu45.9.13-2ubuntu4.24.04.15.9.13-2ubuntu4.24.04.25.9.13-2ubuntu4.24.04.3 |
5.9.13-2ubuntu4.24.04.4 |
strongswanUbuntu:25.10 |
before 6.0.1-6ubuntu4.4, plus listed versions 5.9.13-2ubuntu45.9.13-2ubuntu56.0.1-6ubuntu26.0.1-6ubuntu46.0.1-6ubuntu4.16.0.1-6ubuntu4.26.0.1-6ubuntu4.3 |
6.0.1-6ubuntu4.4 |
strongswanUbuntu:26.04:LTS |
before 6.0.4-1ubuntu3.1, plus listed versions 6.0.1-6ubuntu46.0.1-6ubuntu56.0.4-1ubuntu16.0.4-1ubuntu26.0.4-1ubuntu3 |
6.0.4-1ubuntu3.1 |
strongswanopenSUSE:Tumbleweed |
before 6.0.7-1.1 | 6.0.7-1.1 |
strongswanopenSUSE:Leap 16.0 |
before 6.0.6-160000.2.1 | 6.0.6-160000.2.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| facts | OSV | |
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-47895 is a high vulnerability (CVSS 7.5) in Strongswan, published June 8, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.42%, the 36th percentile. Fixed in strongswan 6.0.7-r0.
References
strongswan.org/download.html
github.com/strongswan/strongswan/releases/tag/6.0.7
nvd.nist.gov/vuln/detail/CVE-2026-47895
security.alpinelinux.org/vuln/CVE-2026-47895
Show 53 moreShow less
security-tracker.debian.org/tracker/CVE-2026-47895
advisories.mageia.org/MGASA-2026-0490.html
bugs.mageia.org/show_bug.cgi?id=35413
lists.debian.org/debian-security-announce/2026/msg00137.html
ubuntu.com/security/notices/USN-8407-1
lists.fedoraproject.org/archives/list/[email protected]/message/72R2725DIUVMEB7TOVID7XNHTPDC3UIH
suse.com/support/update/announcement/2026/suse-su-202622168-1
bugzilla.suse.com/1266360
cve.org/CVERecord?id=CVE-2026-47895