Every CVE Search/ Get API key

CVE-2026-35332

Updated strongswan packages fix security vulnerabilities

No scoreFix available

Please see the links for aditional information about the vulnerabilities.

What each source reports

OSVMGASA-2026-0490 No score

Updated strongswan packages fix security vulnerabilities

Please see the links for aditional information about the vulnerabilities.

Record
MGASA-2026-0490
Updated
2026-11-02
OSVopenSUSE-SU-2026:10623-1 No score

strongswan-6.0.6-1.1 on GA media

These are all security issues fixed in the strongswan-6.0.6-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:10623-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:20678-1 No score

Security update for strongswan

This update for strongswan fixes the following issues:

Update to version 6.0.6 (jsc#PED-16145).

Security issued fixed:

  • CVE-2026-35328: infinite loop when handling supported versions TLS extension (bsc#1261712).
  • CVE-2026-35329: NULL pointer dereference when processing padding in PKCS#7 (bsc#1261717).
  • CVE-2026-35330: integer underflow when handling EAP-SIM/AKA attributes (bsc#1261705).
  • CVE-2026-35331: acceptance of certificates violating X.509 name constraints (bsc#1261718).
  • CVE-2026-35332: NULL pointer dereference when handling ECDH public value in TLS (bsc#1261708).
  • CVE-2026-35333: integer underflow when handling RADIUS attributes (bsc#1261706).
  • CVE-2026-35334: possible NULL pointer dereference in RSA decryption (bsc#1261720).

Other updates and bugfixes:

  • Version 6.0.6.
    • Enhancements and Optimizations
      • Added the unique ID to the log messages when creating an IKE SA as responder and when deleting such a half-open SA
      • The credential factory now enforces an upper limit of 10 when creating nested credentials.
      • Added Georgian translation to the NM plugin.
    • Fixes
      • IKEv2 fragments with a total fragment count lower than before are now dropped as mandated by the RFC .
      • Fixed a potential out-of-bounds read when parsing EAP-SIM/AKA attributes with actual length field.
      • Fixed a potential out-of-bounds read when enumerating hashes in OCSP CERTREQ payloads .
      • Fixed a potential crash in the vici plugin when parsing messages that encode the length of a VICI_LIST_ITEM incorrectly.
      • Avoid allocating a large buffer for TLS cipher suites on the stack using alloca().
      • Ensure TLS 1.3 CertificateRequest structures are valid on the client.
      • Prevent an infinite loop if the EAP-SIM version list on the client contains more than one entry .
      • Fixed a crash in the tnccs_11 plugin if TNCCS-ReasonStrings is empty or only contains empty nodes .
      • Fixed verification of RSA signatures with SHA3-224 via botan plugin.
      • Close the internal IPv6 socket when a tun_device_t is destroyed .
      • Update the address family in the SA selector when the addresses of a tunnel mode IPsec SA change in the kernel-netlink plugin.
  • Version 6.0.5:
    • Fixed a vulnerability in the eap-ttls plugin related to processing EAP-TTLS AVPs that can lead to resource exhaustion or a crash.
    • The new icmp option enables the forwarding of certain ICMP error messages (e.g. Fragmentation Needed), even if their source address doesn't match the negotiated traffic selectors, when running on Linux kernels that support this (v6.9+).
    • charon-cmd now supports childless IKE SA initiation with the --childless option.
    • The dhcp plugin now keeps track of address leases across make-before-break reauthentications to avoid releasing the address when the old SA is terminated
    • Added support for organizationIdentifier RDNs, which are used in e.g. eIDAS certificates, when parsing ASN.1 DN identities from strings.
Record
openSUSE-SU-2026:20678-1
Updated
2026-11-02
OSVSUSE-SU-2026:1637-1 No score

Security update for strongswan

This update for strongswan fixes the following issues:

  • CVE-2026-35328: infinite loop when handling supported versions TLS extension (bsc#1261712).
  • CVE-2026-35329: null pointer dereference when processing padding in PKCS#7 (bsc#1261717).
  • CVE-2026-35330: integer underflow when handling EAP-SIM/AKA attributes (bsc#1261705).
  • CVE-2026-35331: accepting certificates violating name constraints (bsc#1261718).
  • CVE-2026-35332: null pointer dereference when handling ECDH public value in TLS (bsc#1261708).
  • CVE-2026-35333: integer underflow when handling RADIUS attributes (bsc#1261706).
  • CVE-2026-35334: possible null pointer dereference in RSA decryption (bsc#1261720).
Record
SUSE-SU-2026:1637-1
Updated
2026-11-02
OSVSUSE-SU-2026:1762-1 No score

Security update for strongswan

This update for strongswan fixes the following issues:

  • CVE-2026-35329: NULL pointer dereference when processing padding in PKCS#7 (bsc#1261717).
  • CVE-2026-35330: integer underflow when handling EAP-SIM/AKA attributes (bsc#1261705).
  • CVE-2026-35331: acceptance of certificates violating X.509 name constraints (bsc#1261718).
  • CVE-2026-35332: NULL pointer dereference when handling ECDH public value in TLS (bsc#1261708).
  • CVE-2026-35333: integer underflow when handling RADIUS attributes (bsc#1261706).
  • CVE-2026-35334: possible NULL pointer dereference in RSA decryption (bsc#1261720).
Record
SUSE-SU-2026:1762-1
Updated
2026-11-02
OSVSUSE-SU-2026:21547-1 No score

Security update for strongswan

This update for strongswan fixes the following issues:

Update to version 6.0.6 (jsc#PED-16145).

Security issued fixed:

  • CVE-2026-35328: infinite loop when handling supported versions TLS extension (bsc#1261712).
  • CVE-2026-35329: NULL pointer dereference when processing padding in PKCS#7 (bsc#1261717).
  • CVE-2026-35330: integer underflow when handling EAP-SIM/AKA attributes (bsc#1261705).
  • CVE-2026-35331: acceptance of certificates violating X.509 name constraints (bsc#1261718).
  • CVE-2026-35332: NULL pointer dereference when handling ECDH public value in TLS (bsc#1261708).
  • CVE-2026-35333: integer underflow when handling RADIUS attributes (bsc#1261706).
  • CVE-2026-35334: possible NULL pointer dereference in RSA decryption (bsc#1261720).

Other updates and bugfixes:

  • Version 6.0.6.
    • Enhancements and Optimizations
      • Added the unique ID to the log messages when creating an IKE SA as responder and when deleting such a half-open SA
      • The credential factory now enforces an upper limit of 10 when creating nested credentials.
      • Added Georgian translation to the NM plugin.
    • Fixes
      • IKEv2 fragments with a total fragment count lower than before are now dropped as mandated by the RFC .
      • Fixed a potential out-of-bounds read when parsing EAP-SIM/AKA attributes with actual length field.
      • Fixed a potential out-of-bounds read when enumerating hashes in OCSP CERTREQ payloads .
      • Fixed a potential crash in the vici plugin when parsing messages that encode the length of a VICI_LIST_ITEM incorrectly.
      • Avoid allocating a large buffer for TLS cipher suites on the stack using alloca().
      • Ensure TLS 1.3 CertificateRequest structures are valid on the client.
      • Prevent an infinite loop if the EAP-SIM version list on the client contains more than one entry .
      • Fixed a crash in the tnccs_11 plugin if TNCCS-ReasonStrings is empty or only contains empty nodes .
      • Fixed verification of RSA signatures with SHA3-224 via botan plugin.
      • Close the internal IPv6 socket when a tun_device_t is destroyed .
      • Update the address family in the SA selector when the addresses of a tunnel mode IPsec SA change in the kernel-netlink plugin.
  • Version 6.0.5:
    • Fixed a vulnerability in the eap-ttls plugin related to processing EAP-TTLS AVPs that can lead to resource exhaustion or a crash.
    • The new icmp option enables the forwarding of certain ICMP error messages (e.g. Fragmentation Needed), even if their source address doesn't match the negotiated traffic selectors, when running on Linux kernels that support this (v6.9+).
    • charon-cmd now supports childless IKE SA initiation with the --childless option.
    • The dhcp plugin now keeps track of address leases across make-before-break reauthentications to avoid releasing the address when the old SA is terminated
    • Added support for organizationIdentifier RDNs, which are used in e.g. eIDAS certificates, when parsing ASN.1 DN identities from strings.
Record
SUSE-SU-2026:21547-1
Updated
2026-11-02
Show 5 moreShow less
OSVSUSE-SU-2026:2197-1 No score

Security update for strongswan

This update for strongswan fixes the following issues:

  • CVE-2026-35328: infinite loop when handling supported versions TLS extension (bsc#1261712).
  • CVE-2026-35329: null pointer dereference when processing padding in PKCS#7 (bsc#1261717).
  • CVE-2026-35330: integer underflow when handling EAP-SIM/AKA attributes (bsc#1261705).
  • CVE-2026-35332: null pointer dereference when handling ECDH public value in TLS (bsc#1261708).
  • CVE-2026-35333: integer underflow when handling RADIUS attributes (bsc#1261706).
  • CVE-2026-35334: null pointer dereference in RSA decryption (bsc#1261720).
Record
SUSE-SU-2026:2197-1
Updated
2026-11-02
OSVSUSE-SU-2026:2368-1 No score

Security update for strongswan

This update for strongswan fixes the following issues

  • CVE-2026-35328: infinite loop when handling supported versions TLS extension (bsc#1261712).
  • CVE-2026-35329: null pointer dereference when processing padding in PKCS#7 (bsc#1261717).
  • CVE-2026-35330: integer underflow when handling EAP-SIM/AKA attributes (bsc#1261705).
  • CVE-2026-35331: accepting certificates violating name constraints (bsc#1261718).
  • CVE-2026-35332: null pointer dereference when handling ECDH public value in TLS (bsc#1261708).
  • CVE-2026-35333: integer underflow when handling RADIUS attributes (bsc#1261706).
  • CVE-2026-35334: possible null pointer dereference in RSA decryption (bsc#1261720).
  • CVE-2026-47895: double-free when destroying certain cloned identities (bsc#1266360).
Record
SUSE-SU-2026:2368-1
Updated
2026-11-02
OSVSUSE-SU-2026:2459-1 No score

Security update for strongswan

This update for strongswan fixes the following issues

  • CVE-2026-35328: infinite loop when handling supported versions TLS extension (bsc#1261712).
  • CVE-2026-35329: null pointer dereference when processing padding in PKCS#7 (bsc#1261717).
  • CVE-2026-35330: integer underflow when handling EAP-SIM/AKA attributes (bsc#1261705).
  • CVE-2026-35331: accepting certificates violating name constraints (bsc#1261718).
  • CVE-2026-35332: null pointer dereference when handling ECDH public value in TLS (bsc#1261708).
  • CVE-2026-35333: integer underflow when handling RADIUS attributes (bsc#1261706).
  • CVE-2026-35334: possible null pointer dereference in RSA decryption (bsc#1261720).
  • CVE-2026-47895: double-free when destroying certain cloned identities (bsc#1266360).
Record
SUSE-SU-2026:2459-1
Updated
2026-11-02
OSVUBUNTU-CVE-2026-35332 No score

NULL-Pointer Dereference When Handling ECDH Public Value in TLS

Record
UBUNTU-CVE-2026-35332
Updated
2026-11-02
OSVUSN-8196-1 No score

strongswan vulnerabilities

Haruto Kimura discovered that strongSwan incorrectly handled the supported_versions extension in TLS. A remote attacker could possibly use this issue to cause strongSwan to stop responding, resulting in a denial of service. (CVE-2026-35328)

Haruto Kimura discovered that strongSwan incorrectly handled certain encrypted PKCS#7 containers. A remote attacker could possibly use this issue to cause strongSwan to crash, resulting in a denial of service. (CVE-2026-35329)

Lukas Johannes Moeller discovered that strongSwan incorrectly handled certain EAP-SIM/AKA attributes. A remote attacker could use this issue to cause strongSwan to stop responding, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2026-35330)

Haruto Kimura discovered that strongSwan incorrectly handled processing of X.509 name constraints. A remote attacker could possibly use this issue to bypass excluded name constraints. (CVE-2026-35331)

Haruto Kimura discovered that strongSwan incorrectly processed ECDH public values. A remote attacker could possibly use this issue to cause strongSwan to crash, resulting in a denial of service. (CVE-2026-35332)

Lukas Johannes Moeller discovered that strongSwan incorrectly handled certain RADIUS attributes. A remote attacker could possibly use this issue to cause strongSwan to crash, resulting in a denial of service. (CVE-2026-35333)

Ryo Shimada discovered that strongSwan incorrectly handled RSA decryption. A remote attacker could possibly use this issue to cause strongSwan to crash, resulting in a denial of service. (CVE-2026-35334)

Record
USN-8196-1
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
strongswan
Debian:12
 before 5.9.8-5+deb12u4, plus listed versions
5.9.8-55.9.8-5+deb12u15.9.8-5+deb12u25.9.8-5+deb12u3
5.9.8-5+deb12u4
strongswan
Debian:13
 before 6.0.1-6+deb13u5, plus listed versions
6.0.1-66.0.1-6+deb13u16.0.1-6+deb13u26.0.1-6+deb13u4
6.0.1-6+deb13u5
strongswan
Debian:14
 before 6.0.6-1, plus listed versions
6.0.1-66.0.2-16.0.3-16.0.4-16.0.5-1
6.0.6-1
strongswan
Mageia:10
From an advisory covering 13 CVEs
 before 6.1.0-1.mga10
6.1.0-1.mga10
strongswan
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 8 CVEs
 before 5.9.11-150400.19.35.1
5.9.11-150400.19.35.1
strongswan
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 8 CVEs
 before 5.9.11-150400.19.35.1
5.9.11-150400.19.35.1
strongswan
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 8 CVEs
 before 5.9.11-150400.19.35.1
5.9.11-150400.19.35.1
strongswan
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 8 CVEs
 before 5.9.11-150400.19.35.1
5.9.11-150400.19.35.1
strongswan
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 8 CVEs
 before 5.9.11-150500.5.23.2
5.9.11-150500.5.23.2
strongswan
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 8 CVEs
 before 5.9.11-150500.5.23.2
5.9.11-150500.5.23.2
Show 22 moreShow less
Affected packages
PackageAffectedFixed
strongswan
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 8 CVEs
 before 5.9.11-150500.5.23.2
5.9.11-150500.5.23.2
strongswan
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 8 CVEs
 before 5.9.11-150500.5.23.2
5.9.11-150500.5.23.2
strongswan
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
4.6.4-95.1.0-25.1.0-35.1.1-0ubuntu15.1.1-0ubuntu2
Show 25 moreShow less
5.1.1-0ubuntu35.1.1-0ubuntu45.1.1-0ubuntu55.1.1-0ubuntu75.1.1-0ubuntu145.1.1-0ubuntu175.1.2~dr3+git20130120-0ubuntu25.1.2~dr3+git20130120-0ubuntu35.1.2~rc1-0ubuntu35.1.2~rc1-0ubuntu45.1.2~rc2-0ubuntu25.1.2-0ubuntu15.1.2-0ubuntu25.1.2-0ubuntu2.25.1.2-0ubuntu2.35.1.2-0ubuntu2.45.1.2-0ubuntu2.55.1.2-0ubuntu2.65.1.2-0ubuntu2.75.1.2-0ubuntu2.85.1.2-0ubuntu2.105.1.2-0ubuntu2.115.1.2-0ubuntu2.11+esm15.1.2-0ubuntu2.11+esm25.1.2-0ubuntu2.11+esm3
 None known
strongswan
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
5.1.2-0ubuntu65.1.2-0ubuntu75.1.2-0ubuntu85.3.5-1ubuntu15.3.5-1ubuntu2
Show 12 moreShow less
5.3.5-1ubuntu35.3.5-1ubuntu3.15.3.5-1ubuntu3.25.3.5-1ubuntu3.35.3.5-1ubuntu3.45.3.5-1ubuntu3.55.3.5-1ubuntu3.75.3.5-1ubuntu3.85.3.5-1ubuntu3.8+esm15.3.5-1ubuntu3.8+esm25.3.5-1ubuntu3.8+esm35.3.5-1ubuntu3.8+esm4
 None known
strongswan
Ubuntu:Pro:FIPS-updates:16.04:LTS
 All versions, plus listed versions
5.3.5-1ubuntu3.fips.3.4.15.3.5-1ubuntu3.fips.3.4.25.3.5-1ubuntu3.fips.3.8.15.3.5-1ubuntu3.fips.3.8.25.3.5-1ubuntu3.fips.3.8.35.3.5-1ubuntu3.fips.3.8.65.3.5-1ubuntu3.fips.3.8.7
 None known
strongswan
Ubuntu:Pro:FIPS:16.04:LTS
 All versions, plus listed versions
5.3.5-1ubuntu3.fips.3.15.3.5-1ubuntu3.fips.3.25.3.5-1ubuntu3.fips.3.3
 None known
strongswan
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.5.1-4ubuntu25.5.1-4ubuntu35.6.1-2ubuntu15.6.1-2ubuntu25.6.1-2ubuntu3
Show 11 moreShow less
5.6.1-2ubuntu45.6.2-1ubuntu25.6.2-1ubuntu2.25.6.2-1ubuntu2.35.6.2-1ubuntu2.45.6.2-1ubuntu2.55.6.2-1ubuntu2.65.6.2-1ubuntu2.75.6.2-1ubuntu2.85.6.2-1ubuntu2.95.6.2-1ubuntu2.9+esm1
 None known
strongswan
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
5.6.2-1ubuntu2.fips.2.5.15.6.2-1ubuntu2.fips.2.7.15.6.2-1ubuntu2.fips.2.7.25.6.2-1ubuntu2.fips.2.8.15.6.2-1ubuntu2.fips.2.95.6.2-1ubuntu2.fips.2.9+esm1
 None known
strongswan
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
5.6.2-1ubuntu2.fips.2.4.25.6.2-1ubuntu2.fips.2.5.1
 None known
strongswan
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.7.2-1ubuntu35.8.1-1ubuntu15.8.2-1ubuntu15.8.2-1ubuntu25.8.2-1ubuntu3
Show 6 moreShow less
5.8.2-1ubuntu3.15.8.2-1ubuntu3.25.8.2-1ubuntu3.35.8.2-1ubuntu3.45.8.2-1ubuntu3.55.8.2-1ubuntu3.6
 None known
strongswan
Ubuntu:Pro:FIPS-updates:20.04:LTS
 All versions, plus listed versions
5.8.2-1ubuntu3.fips.3.1.25.8.2-1ubuntu3.fips.3.3.15.8.2-1ubuntu3.fips.3.4.15.8.2-1ubuntu3.fips.3.55.8.2-1ubuntu3.fips.3.6
 None known
strongswan
Ubuntu:Pro:FIPS:20.04:LTS
 All versions, plus listed versions
5.8.2-1ubuntu3.fips.3.1.2
 None known
strongswan
Ubuntu:22.04:LTS
 before 5.9.5-2ubuntu2.6, plus listed versions
5.9.1-1ubuntu35.9.1-1ubuntu3.15.9.4-1ubuntu15.9.4-1ubuntu25.9.4-1ubuntu3
Show 8 moreShow less
5.9.4-1ubuntu45.9.5-2ubuntu15.9.5-2ubuntu25.9.5-2ubuntu2.15.9.5-2ubuntu2.25.9.5-2ubuntu2.35.9.5-2ubuntu2.45.9.5-2ubuntu2.5
5.9.5-2ubuntu2.6
strongswan
Ubuntu:Pro:FIPS-preview:22.04:LTS
 All versions, plus listed versions
5.9.5-2ubuntu2.1+Fips15.9.5-2ubuntu2.2+Fips1
 None known
strongswan
Ubuntu:Pro:FIPS-updates:22.04:LTS
 before 5.9.5-2ubuntu2.6+Fips1, plus listed versions
5.9.5-2ubuntu2.1+Fips15.9.5-2ubuntu2.2+Fips15.9.5-2ubuntu2.3+Fips15.9.5-2ubuntu2.4+Fips15.9.5-2ubuntu2.5+Fips1
5.9.5-2ubuntu2.6+Fips1
strongswan
Ubuntu:24.04:LTS
 before 5.9.13-2ubuntu4.24.04.3, plus listed versions
5.9.11-1ubuntu15.9.11-1ubuntu25.9.12-1ubuntu15.9.13-2ubuntu15.9.13-2ubuntu35.9.13-2ubuntu45.9.13-2ubuntu4.24.04.15.9.13-2ubuntu4.24.04.2
5.9.13-2ubuntu4.24.04.3
strongswan
Ubuntu:25.10
 before 6.0.1-6ubuntu4.3, plus listed versions
5.9.13-2ubuntu45.9.13-2ubuntu56.0.1-6ubuntu26.0.1-6ubuntu46.0.1-6ubuntu4.16.0.1-6ubuntu4.2
6.0.1-6ubuntu4.3
strongswan
Ubuntu:26.04:LTS
 before 6.0.4-1ubuntu3, plus listed versions
6.0.1-6ubuntu46.0.1-6ubuntu56.0.4-1ubuntu16.0.4-1ubuntu2
6.0.4-1ubuntu3
strongswan
Ubuntu:22.04:LTS
From an advisory covering 7 CVEs
 before 5.9.5-2ubuntu2.6, plus listed versions
5.9.1-1ubuntu35.9.1-1ubuntu3.15.9.4-1ubuntu15.9.4-1ubuntu25.9.4-1ubuntu3
Show 8 moreShow less
5.9.4-1ubuntu45.9.5-2ubuntu15.9.5-2ubuntu25.9.5-2ubuntu2.15.9.5-2ubuntu2.25.9.5-2ubuntu2.35.9.5-2ubuntu2.45.9.5-2ubuntu2.5
5.9.5-2ubuntu2.6
strongswan
Ubuntu:24.04:LTS
From an advisory covering 7 CVEs
 before 5.9.13-2ubuntu4.24.04.3, plus listed versions
5.9.11-1ubuntu15.9.11-1ubuntu25.9.12-1ubuntu15.9.13-2ubuntu15.9.13-2ubuntu35.9.13-2ubuntu45.9.13-2ubuntu4.24.04.15.9.13-2ubuntu4.24.04.2
5.9.13-2ubuntu4.24.04.3
strongswan
Ubuntu:25.10
From an advisory covering 7 CVEs
 before 6.0.1-6ubuntu4.3, plus listed versions
5.9.13-2ubuntu45.9.13-2ubuntu56.0.1-6ubuntu26.0.1-6ubuntu46.0.1-6ubuntu4.16.0.1-6ubuntu4.2
6.0.1-6ubuntu4.3
strongswan
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 6.0.6-1.1
6.0.6-1.1

History

History
RecordedChangedSources
affected, facts
first indexedOSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-35332 is a vulnerability with no CVSS score yet in strongswan, published April 22, 2026. No source lists public exploit code. Fixed in strongswan 5.9.8-5+deb12u4.

References

Show 37 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open