ST
Product
strongSwan
50
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 17Medium 6Low 4
Watch
Add strongSwan to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-41913 | 9.8 | Dec 7 | strongSwan before 5.9.12 has a buffer overflow and possible unauthenticated remote code execution via a DH public value that exceeds the internal buffer in charon-tkm's DH proxy Affected: 5.3.0 before 5.9.12 |
| CVE-2023-26463 | 9.8 | Apr 15 | strongSwan 5.9.8 and 5.9.9 potentially allows remote code execution because it uses a variable named "public" for two different purposes within the same function Affected: 5.9.8; 5.9.9 |
| CVE-2015-3991 | 9.8 | Sep 7 | strongSwan 5.2.2 and 5.3.0 allows remote attackers to cause a denial of service (daemon crash) or execute arbitrary code Affected: 5.2.2; 5.3.0 |
| CVE-2021-45079 | 9.1 | Jan 31 | In strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early without actually authenticating the client and (in the case of EAP methods with mutual… Affected: 4.1.2 before 5.9.5 |
| CVE-2026-78133 | 7.5 | Sep 11 | libcharon in strongSwan 6.0.0 through 6.0.7 has a use-after-free in IKEv2 rekeying collision handling Affected: 6.0.0 before 6.1.0 |
| CVE-2026-78132 | 7.5 | Sep 11 | strongSwan 5.1.3 through 6.0.7 has an infinite loop in the x509 plugin's attribute certificate parser for ietfAttrSyntax Affected: 5.1.3 before 6.1.0 |
| CVE-2026-78130 | 7.5 | Sep 11 | strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute certificate parser Affected: 4.2.0 before 6.1.0 |
| CVE-2026-47895 | 7.5 | Aug 22 | In strongSwan before 6.0.7, identity parsing/cloning is mishandled Affected: 4.3.3 before 6.0.7 |
| CVE-2026-25075 | 7.5 | Mar 23 | strongSwan 4.5.0 < 6.0.5 EAP-TTLS AVP Parsing Integer Underflow Affected: 4.5.0 before 6.0.5 |
| CVE-2022-40617 | 7.5 | Oct 31 | strongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation plugin by sending a crafted end-entity (and intermediate CA) certificate that… Affected: before 5.9.8 |
| CVE-2021-41991 | 7.5 | Oct 18 | The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests with different certificates to fill the cache and later… Affected: 4.2.10 before 5.9.4 |
| CVE-2021-41990 | 7.5 | Oct 18 | The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate with an RSASSA-PSS signature Affected: 5.6.1 before 5.9.4 |
| CVE-2018-17540 | 7.5 | Oct 3 | The gmp plugin in strongSwan before 5.7.1 has a Buffer Overflow via a crafted certificate Affected: before 5.7.1 |
| CVE-2018-16152 | 7.5 | Sep 26 | In verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c in the gmp plugin in strongSwan 4.x and 5.x before 5.7.0, the RSA implementation based on GMP does not reject excess data… Affected: 4.0.0 through 4.6.4; 5.0.0 before 5.7.0 |
| CVE-2018-16151 | 7.5 | Sep 26 | In verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c in the gmp plugin in strongSwan 4.x and 5.x before 5.7.0, the RSA implementation based on GMP does not reject excess data… Affected: 4.0.0 through 4.6.4; 5.0.0 before 5.7.0 |
| CVE-2018-10811 | 7.5 | Jun 19 | strongSwan 5.6.0 and older allows Remote Denial of Service because of Missing Initialization of a Variable Affected: 5.0.1 before 5.6.3 |
| CVE-2017-11185 | 7.5 | Aug 18 | The gmp plugin in strongSwan before 5.6.0 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted RSA signature Affected: through 5.5.3 |
| CVE-2017-9023 | 7.5 | Jun 8 | The ASN.1 parser in strongSwan before 5.5.3 improperly handles CHOICE types when the x509 plugin is enabled, which allows remote attackers to cause a denial of service (infinite… Affected: through 5.5.2 |
| CVE-2017-9022 | 7.5 | Jun 8 | The gmp plugin in strongSwan before 5.5.3 does not properly validate RSA public keys before calling mpz_powm_sec, which allows remote peers to cause a denial of service (floating… Affected: through 5.5.2 |
| CVE-2026-78135 | 7.3 | Sep 11 | libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state machine Affected: 5.9.7 before 6.1.0 |
| CVE-2026-78134 | 7.1 | Sep 11 | strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins because there can be a missing or mismatched inner EAP identity Affected: 4.5.0 before 6.1.0 |
| CVE-2022-4967 | 6.5 | May 14 | strongSwan versions 5.9.2 through 5.9.5 are affected by authorization bypass through improper validation of certificate with host mismatch (CWE-297) Affected: 5.9.2 before 5.9.6 |
| CVE-2018-5388 | 6.5 | May 31 | In stroke_socket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer underflow, which may lead to resource exhaustion and denial of service while… Affected: before 5.6.3 |
| CVE-2026-78129 | 5.9 | Sep 11 | strongSwan 4.6.2 through 6.0.7 has an infinite loop in PKCS#5 decryption Affected: 4.6.2 before 6.1.0 |
| CVE-2026-78126 | 5.9 | Sep 11 | strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka plugin Affected: 4.1.10 before 6.1.0 |
| CVE-2026-78123 | 5.9 | Sep 11 | strongSwan 5.0.2 through 6.0.7 has an Expired Pointer Dereference in PKCS#7 parsing in the openssl plugin Affected: 5.0.2 before 6.1.0 |
| CVE-2018-6459 | 5.3 | Feb 20 | The rsa_pss_params_parse function in libstrongswan/credentials/keys/signature_params.c in strongSwan 5.6.1 allows remote attackers to cause a denial of service via a crafted… Affected: 5.6.1 |
| CVE-2026-78131 | 3.7 | Sep 11 | strongSwan 4.2.0 through 6.0.7 has a missing release of memory after its effective lifetime in the x509 plugin's attribute certificate parser Affected: 4.2.0 before 6.1.0 |
| CVE-2026-78127 | 3.7 | Sep 11 | libcharon in strongSwan 4.1.2 through 6.0.7 has a missing release of memory after its effective lifetime in the IKE message parser Affected: 4.1.2 before 6.1.0 |
| CVE-2026-78124 | 3.7 | Sep 11 | strongSwan 5.0.2 through 6.0.7 allows PKCS#7 certificate enumeration in the openssl plugin that leads to a lack of release of memory after its effective lifetime Affected: 5.0.2 before 6.1.0 |
| CVE-2019-10155 | 3.1 | Jun 12 | The Libreswan Project has found a vulnerability in the processing of IKEv1 informational exchange packets which are encrypted and integrity protected using the established IKE SA… Affected: before 5.0.0 |
| CVE-2015-8023 | – | Nov 18 | The server implementation of the EAP-MSCHAPv2 protocol in the eap-mschapv2 plugin in strongSwan 4.2.12 through 5.x before 5.3.4 does not properly validate local state, which… Affected: 4.2.12; 4.2.13; 4.2.14; 4.2.15; 4.2.16; 4.3.0; +34 more |
| CVE-2015-4171 | – | Jun 10 | strongSwan 4.3.0 through 5.x before 5.3.2 and strongSwan VPN Client before 1.4.6, when using EAP or pre-shared keys for authenticating an IKEv2 connection, does not enforce server… Affected: 4.3.0; 4.3.1; 4.3.2; 4.3.3; 4.3.4; 4.3.5; +28 more |
| CVE-2014-9221 | – | Jan 7 | strongSwan 4.5.x through 5.2.x before 5.2.1 allows remote attackers to cause a denial of service (invalid pointer dereference) via a crafted IKEv2 Key Exchange (KE) message with… Affected: 4.5.0; 4.5.1; 4.5.2; 4.5.3; 4.6.0; 4.6.1; +13 more |
| CVE-2014-2891 | – | May 7 | strongSwan before 5.1.2 allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon crash) via a crafted ID_DER_ASN1_DN ID payload Affected: through 5.1.1; 5.0.0; 5.0.1; 5.0.2; 5.0.3; 5.0.4; +1 more |
| CVE-2014-2338 | – | Apr 16 | IKEv2 in strongSwan 4.0.7 before 5.1.3 allows remote attackers to bypass authentication by rekeying an IKE_SA during (1) initiation or (2) re-authentication, which triggers the… Affected: 4.0.7; 4.1.0; 4.1.1; 4.1.2; 4.1.3; 4.1.4; +34 more |
| CVE-2013-6076 | – | Nov 2 | strongSwan 5.0.2 through 5.1.0 allows remote attackers to cause a denial of service (NULL pointer dereference and charon daemon crash) via a crafted IKEv1 fragmentation packet Affected: 5.0.2; 5.0.3; 5.0.4; 5.1.0 |
| CVE-2013-6075 | – | Nov 2 | The compare_dn function in utils/identification.c in strongSwan 4.3.3 through 5.1.1 allows (1) remote attackers to cause a denial of service (out-of-bounds read, NULL pointer… Affected: 4.3.3; 4.3.4; 4.3.5; 4.3.6; 4.3.7; 4.4.0; +16 more |
| CVE-2013-5018 | – | Aug 28 | The is_asn1 function in strongSwan 4.1.11 through 5.0.4 does not properly validate the return value of the asn1_length function, which allows remote attackers to cause a denial of… Affected: 4.1.11; 5.0.0; 5.0.1; 5.0.2; 5.0.3; 5.0.4 |
| CVE-2013-2054 | – | Jul 9 | Buffer overflow in the atodn function in strongSwan 2.0.0 through 4.3.4, when Opportunistic Encryption is enabled and an RSA key is being used, allows remote attackers to cause a… Affected: 2.0.0; 2.0.1; 2.0.2; 2.1.0; 2.1.1; 2.1.2; +34 more |
| CVE-2013-2944 | – | May 2 | strongSwan 4.3.5 through 5.0.3, when using the OpenSSL plugin for ECDSA signature verification, allows remote attackers to authenticate as other users via an invalid signature Affected: 4.3.5; 4.3.6; 4.3.7; 4.4.0; 4.4.1; 4.5.0; +11 more |
| CVE-2012-2388 | – | Jun 27 | The GMP Plugin in strongSwan 4.2.0 through 4.6.3 allows remote attackers to bypass authentication via a (1) empty or (2) zeroed RSA signature, aka "RSA signature verification… Affected: 4.2.0; 4.2.1; 4.2.2; 4.2.3; 4.2.4; 4.2.5; +28 more |
| CVE-2010-2628 | – | Aug 20 | The IKE daemon in strongSwan 4.3.x before 4.3.7 and 4.4.x before 4.4.1 does not properly check the return values of snprintf calls, which allows remote attackers to execute… Affected: 4.3.0; 4.3.1; 4.3.2; 4.3.3; 4.3.4; 4.3.5; +2 more |
| CVE-2009-2661 | – | Aug 4 | The asn1_length function in strongSwan 2.8 before 2.8.11, 4.2 before 4.2.17, and 4.3 before 4.3.3 does not properly handle X.509 certificates with crafted Relative Distinguished… Affected: 2.8.0; 2.8.1; 2.8.2; 2.8.3; 2.8.4; 2.8.5; +18 more |
| CVE-2009-2185 | – | Jun 25 | The ASN.1 parser (pluto/asn1.c, libstrongswan/asn1/asn1.c, libstrongswan/asn1/asn1_parser.c) in (a) strongSwan 2.8 before 2.8.10, 4.2 before 4.2.16, and 4.3 before 4.3.2; and (b)… Affected: 2.8.0; 2.8.1; 2.8.2; 2.8.3; 2.8.4; 2.8.5; +24 more |
| CVE-2009-1958 | – | Jun 8 | charon/sa/tasks/child_create.c in the charon daemon in strongSWAN before 4.3.1 switches the NULL checks for TSi and TSr payloads, which allows remote attackers to cause a denial… Affected: through 4.2.9; 2.0.0; 2.0.1; 2.0.2; 2.1.0; 2.1.1; +34 more |
| CVE-2009-1957 | – | Jun 8 | charon/sa/ike_sa.c in the charon daemon in strongSWAN before 4.3.1 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an invalid… Affected: through 4.3.0; 2.0.0; 2.0.1; 2.0.2; 2.1.0; 2.1.1; +34 more |
| CVE-2009-0790 | – | Apr 1 | The pluto IKE daemon in Openswan and Strongswan IPsec 2.6 before 2.6.21 and 2.4 before 2.4.14, and Strongswan 4.2 before 4.2.14 and 2.8 before 2.8.9, allows remote attackers to… Affected: 2.4.0; 2.4.0a; 2.4.1; 2.4.2; 2.4.3; 2.4.4; +28 more |
| CVE-2008-4551 | – | Oct 14 | strongSwan 4.2.6 and earlier allows remote attackers to cause a denial of service (daemon crash) via an IKE_SA_INIT message with a large number of NULL values in a Key Exchange… Affected: through 4.2.6; 2.0.0; 2.0.1; 2.0.2; 2.1.0; 2.1.1; +34 more |
| CVE-2004-0590 | – | Dec 6 | FreeS/WAN 1.x and 2.x, and other related products including superfreeswan 1.x, openswan 1.x before 1.0.6, openswan 2.x before 2.1.4, and strongSwan before 2.1.3, allows remote… Affected: through 2.1.2 |
Showing 50