CVE-2026-78133
CVE-2026-78133
This page contains facts from public vulnerability sources. Check the original advisory before updating.
libcharon in strongSwan 6.0.0 through 6.0.7 has a use-after-free in IKEv2 rekeying collision handling.
CVSS 7.5 · High · EPSS 0.5% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
strongswan
- Versions
- ≥ 6.0.0, < 6.1.0: Affected (semver)
Update to 6.1.0
strongswan Debian:13
- Versions
- 6.0.1-6
- 6.0.1-6+deb13u1
- 6.0.1-6+deb13u2
- 6.0.1-6+deb13u4
- 6.0.1-6+deb13u5
- 6.0.1-6+deb13u6
- Affected ranges
- ECOSYSTEM: < 6.0.1-6+deb13u7
Update to 6.0.1-6+deb13u7
strongswan Debian:14
- Versions
- 6.0.1-6
- 6.0.2-1
- 6.0.3-1
- 6.0.4-1
- 6.0.5-1
- 6.0.6-1
- 6.0.7-1
- Affected ranges
- ECOSYSTEM: < 6.1.0-1
Update to 6.1.0-1
strongswan Ubuntu:26.04:LTS
- Versions
- 6.0.1-6ubuntu4
- 6.0.1-6ubuntu5
- 6.0.4-1ubuntu1
- 6.0.4-1ubuntu2
- 6.0.4-1ubuntu3
- 6.0.4-1ubuntu3.1
- Affected ranges
- ECOSYSTEM: < 6.0.4-1ubuntu3.2
Update to 6.0.4-1ubuntu3.2