Strongswan vulnerabilities

Products

• Strongswan 52

Newest

• strongswan libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state... CVE-2026-78135 Fix available 5.6 MediumSeptember 7, 2026
• strongswan strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins... CVE-2026-78134 Fix available 7.1 HighSeptember 7, 2026
• strongswan libcharon in strongSwan 6.0.0 through 6.0.7 has a use-after-free in IKEv2 rekeying collision... CVE-2026-78133 Fix available 7.5 HighSeptember 7, 2026
• strongswan strongSwan 5.1.3 through 6.0.7 has an infinite loop in the x509 plugin's attribute certificate... CVE-2026-78132 Fix available 7.5 HighSeptember 7, 2026
• strongswan strongSwan 4.2.0 through 6.0.7 has a missing release of memory after its effective lifetime in... CVE-2026-78131 Fix available 3.7 LowSeptember 7, 2026
• strongswan strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute... CVE-2026-78130 Fix available 7.5 HighSeptember 7, 2026
• strongswan strongSwan 4.6.2 through 6.0.7 has an infinite loop in PKCS#5 decryption. CVE-2026-78129 Fix available 5.9 MediumSeptember 7, 2026
• strongswan libcharon in strongSwan 4.1.2 through 6.0.7 has a missing release of memory after its effective... CVE-2026-78127 Fix available 3.7 LowSeptember 7, 2026
• strongswan strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka plugin. CVE-2026-78126 Fix available 5.9 MediumSeptember 7, 2026
• strongswan strongSwan 5.0.2 through 6.0.7 allows PKCS#7 certificate enumeration in the openssl plugin that... CVE-2026-78124 Fix available 3.7 LowSeptember 7, 2026
• strongswan strongSwan 5.0.2 through 6.0.7 has an Expired Pointer Dereference in PKCS#7 parsing in the... CVE-2026-78123 Fix available 5.9 MediumSeptember 7, 2026
• strongswan In strongSwan before 6.0.7, identity parsing/cloning is mishandled. Parsed EAP-Identities that... CVE-2026-47895 Fix available 7.5 HighJune 8, 2026
• strongswan strongSwan 4.5.0 < 6.0.5 EAP-TTLS AVP Parsing Integer Underflow CVE-2026-25075 Public exploitFix available 8.7 HighMarch 23, 2026
• strongswan strongman strongMan vulnerable to private credential recovery due to key and counter reuse CVE-2026-25998 8.7 HighFebruary 19, 2026
• strongswan In the eap-mschapv2 plugin (client-side) in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2... CVE-2025-62291 Fix available 8.1 HighOctober 27, 2025
• strongswan strongSwan versions 5.9.2 through 5.9.5 are affected by authorization bypass through improper... CVE-2022-4967 Fix available 7.7 HighMay 13, 2024
• strongswan strongSwan before 5.9.12 has a buffer overflow and possible unauthenticated remote code execution... CVE-2023-41913 Fix available 9.8 CriticalNovember 20, 2023
• strongswan strongSwan 5.9.8 and 5.9.9 potentially allows remote code execution because it uses a variable... CVE-2023-26463 Fix available 9.8 CriticalApril 14, 2023
• strongswan, canonical ubuntu linux, debian linux +2 more +4 more strongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation... CVE-2022-40617 Fix available 7.5 HighOctober 3, 2022
• strongswan, canonical ubuntu linux, debian linux +2 more +4 more In strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early... CVE-2021-45079 Fix available 9.1 CriticalJanuary 24, 2022
• strongswan, debian linux, fedoraproject fedora +22 more +24 more The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon... CVE-2021-41991 Fix available 7.5 HighOctober 18, 2021
• strongswan, debian linux, fedoraproject fedora +17 more +19 more The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate... CVE-2021-41990 Fix available 7.5 HighOctober 18, 2021
• libreswan, fedoraproject fedora, redhat enterprise linux +2 more +4 more The Libreswan Project has found a vulnerability in the processing of IKEv1 informational exchange... CVE-2019-10155 Fix available 3.1 LowJune 12, 2019
• strongswan, canonical ubuntu linux, debian linux +2 more The gmp plugin in strongSwan before 5.7.1 has a Buffer Overflow via a crafted certificate. CVE-2018-17540 Fix available 7.5 HighOctober 1, 2018
• strongswan, canonical ubuntu linux, debian linux +2 more In verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c in the gmp plugin in strongSwan 4.x and... CVE-2018-16152 Fix available 7.5 HighSeptember 24, 2018
• strongswan, canonical ubuntu linux, debian linux +2 more In verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c in the gmp plugin in strongSwan 4.x and... CVE-2018-16151 Fix available 7.5 HighSeptember 24, 2018
• ietf internet key exchange, strongswan +1 more CVE-2018-5389 CVE-2018-5389 5.9 MediumSeptember 6, 2018
• strongswan, canonical ubuntu linux, debian linux +2 more In stroke_socket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer... CVE-2018-5388 Fix available 6.5 MediumMay 31, 2018
• strongswan, canonical ubuntu linux, debian linux +1 more +3 more strongSwan 5.6.0 and older allows Remote Denial of Service because of Missing Initialization of a... CVE-2018-10811 Fix available 7.5 HighMay 28, 2018
• strongswan The rsa_pss_params_parse function in libstrongswan/credentials/keys/signature_params.c in... CVE-2018-6459 Fix available 5.3 MediumFebruary 20, 2018
• strongswan strongSwan 5.2.2 and 5.3.0 allows remote attackers to cause a denial of service (daemon crash) or... CVE-2015-3991 Fix available 9.8 CriticalSeptember 7, 2017
• strongswan The gmp plugin in strongSwan before 5.6.0 allows remote attackers to cause a denial of service ... CVE-2017-11185 Fix available 7.5 HighAugust 11, 2017
• strongswan The ASN.1 parser in strongSwan before 5.5.3 improperly handles CHOICE types when the x509 plugin... CVE-2017-9023 Fix available 7.5 HighMay 30, 2017
• strongswan, canonical ubuntu linux, debian linux +2 more The gmp plugin in strongSwan before 5.5.3 does not properly validate RSA public keys before... CVE-2017-9022 Fix available 7.5 HighMay 30, 2017
• strongswan, canonical ubuntu linux +1 more The server implementation of the EAP-MSCHAPv2 protocol in the eap-mschapv2 plugin in strongSwan 4... CVE-2015-8023 Fix available 5.0 MediumNovember 16, 2015
• strongswan, canonical ubuntu linux, debian linux +2 more +4 more strongSwan 4.5.x through 5.2.x before 5.2.1 allows remote attackers to cause a denial of service ... CVE-2014-9221 Fix available 5.0 MediumDecember 19, 2014
• strongswan, strongswan vpn client, canonical ubuntu linux +1 more +3 more strongSwan 4.3.0 through 5.x before 5.3.2 and strongSwan VPN Client before 1.4.6, when using EAP... CVE-2015-4171 Fix available 2.6 LowMay 14, 2014
• debian strongswan strongSwan before 5.1.2 allows remote attackers to cause a denial of service (NULL pointer... CVE-2014-2891 Fix available 5.0 MediumApril 25, 2014
• strongswan IKEv2 in strongSwan 4.0.7 before 5.1.3 allows remote attackers to bypass authentication by... CVE-2014-2338 Fix available 6.4 MediumApril 14, 2014
• strongswan strongSwan 5.0.2 through 5.1.0 allows remote attackers to cause a denial of service (NULL pointer... CVE-2013-6076 Fix available 5.0 MediumNovember 2, 2013
• strongswan The compare_dn function in utils/identification.c in strongSwan 4.3.3 through 5.1.1 allows (1)... CVE-2013-6075 Fix available 5.0 MediumNovember 1, 2013
• strongswan, opensuse +1 more The is_asn1 function in strongSwan 4.1.11 through 5.0.4 does not properly validate the return... CVE-2013-5018 4.3 MediumAugust 28, 2013
• strongswan Buffer overflow in the atodn function in strongSwan 2.0.0 through 4.3.4, when Opportunistic... CVE-2013-2054 Fix available 5.1 MediumJuly 9, 2013
• strongswan strongSwan 4.3.5 through 5.0.3, when using the OpenSSL plugin for ECDSA signature verification,... CVE-2013-2944 Fix available 4.9 MediumApril 30, 2013
• strongswan The GMP Plugin in strongSwan 4.2.0 through 4.6.3 allows remote attackers to bypass authentication... CVE-2012-2388 Fix available 7.5 HighMay 31, 2012
• strongswan The IKE daemon in strongSwan 4.3.x before 4.3.7 and 4.4.x before 4.4.1 does not properly check... CVE-2010-2628 Fix available 7.5 HighAugust 20, 2010
• strongswan The asn1_length function in strongSwan 2.8 before 2.8.11, 4.2 before 4.2.17, and 4.3 before 4.3.3... CVE-2009-2661 Fix available 5.0 MediumAugust 4, 2009
• strongswan, xelerance openswan +1 more The ASN.1 parser (pluto/asn1.c, libstrongswan/asn1/asn1.c, libstrongswan/asn1/asn1_parser.c) in ... CVE-2009-2185 Fix available 5.0 MediumJune 24, 2009
• strongswan charon/sa/tasks/child_create.c in the charon daemon in strongSWAN before 4.3.1 switches the NULL... CVE-2009-1958 Fix available 5.0 MediumJune 6, 2009
• strongswan charon/sa/ike_sa.c in the charon daemon in strongSWAN before 4.3.1 allows remote attackers to... CVE-2009-1957 Fix available 5.0 MediumJune 6, 2009
• Show olderLoading…