CVE-2026-78135
libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state machine. Because CREATE_CHILD_SA requests are mishandled, there can be an authentication bypass.
Published Updated
PatchFirst · Latest vulnerabilities
strongswan vulnerabilities
Vulnerabilities published for strongswan in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 59
CVE-2026-78134
strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins because there can be a missing or mismatched inner EAP identity.
Published UpdatedCVE-2026-78132
strongSwan 5.1.3 through 6.0.7 has an infinite loop in the x509 plugin's attribute certificate parser for ietfAttrSyntax.
Published UpdatedCVE-2026-78131
strongSwan 4.2.0 through 6.0.7 has a missing release of memory after its effective lifetime in the x509 plugin's attribute certificate parser.
Published UpdatedCVE-2026-78130
strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute certificate parser.
Published UpdatedCVE-2026-78129
strongSwan 4.6.2 through 6.0.7 has an infinite loop in PKCS#5 decryption.
Published UpdatedCVE-2026-78127
libcharon in strongSwan 4.1.2 through 6.0.7 has a missing release of memory after its effective lifetime in the IKE message parser.
Published UpdatedCVE-2026-78126
strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka plugin.
Published UpdatedCVE-2026-78124
strongSwan 5.0.2 through 6.0.7 allows PKCS#7 certificate enumeration in the openssl plugin that leads to a lack of release of memory after its effective lifetime.
Published UpdatedCVE-2026-78123
strongSwan 5.0.2 through 6.0.7 has an Expired Pointer Dereference in PKCS#7 parsing in the openssl plugin.
Published UpdatedCVE-2026-47895
In strongSwan before 6.0.7, identity parsing/cloning is mishandled. Parsed EAP-Identities that result in an empty but non-NULL encoding are not correctly cloned and trigger a double-free once the duplicates are destroyed.
- Update to 5.9.8-5+deb12u5
Published UpdatedUBUNTU-CVE-2026-35334
Possible NULL-Pointer Dereference in RSA Decryption
- Update to 5.9.8-5+deb12u4
Published UpdatedUBUNTU-CVE-2026-35333
Integer Underflow When Handling RADIUS Attributes
- Update to 5.9.8-5+deb12u4
Published UpdatedUBUNTU-CVE-2026-35332
NULL-Pointer Dereference When Handling ECDH Public Value in TLS
- Update to 5.9.8-5+deb12u4
Published UpdatedUBUNTU-CVE-2026-35331
Accepting Certificates Violating Name Constraints
- Update to 5.9.8-5+deb12u4
Published UpdatedUBUNTU-CVE-2026-35330
Integer Underflow When Handling EAP-SIM/AKA Attributes
- Update to 5.9.8-5+deb12u4
Published UpdatedUBUNTU-CVE-2026-35329
NULL-Pointer Dereference When Processing Padding in PKCS#7
- Update to 5.9.8-5+deb12u4
Published UpdatedUBUNTU-CVE-2026-35328
Infinite Loop When Handling Supported Versions TLS Extension
- Update to 5.9.8-5+deb12u4
Published UpdatedstrongSwan 4.5.0 < 6.0.5 EAP-TTLS AVP Parsing Integer Underflow
strongSwan versions 4.5.0 prior to 6.0.5 contain an integer underflow vulnerability in the EAP-TTLS AVP parser that allows unauthenticated remote attackers to cause a denial of service by sending crafted AVP data with invalid length fields during IKEv2 authentication. Attackers can exploit the failure to validate AVP length fields before subtraction to trigger excessive memory allocation or NULL pointer dereference, crashing the charon IKE daemon.
- Update to 5.9.8-5+deb12u3
Published Updatedstrongswan - security update
strongswan - security update
- Update to 5.9.8-5+deb12u3
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.