ST
Product
strongSwan
51
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 18Medium 6Low 4
Watch
Add strongSwan to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-78131 | 3.7 | Sep 11 | strongSwan 4.2.0 through 6.0.7 has a missing release of memory after its effective lifetime in the x509 plugin's attribute certificate parser Affected: 4.2.0 before 6.1.0 |
| CVE-2026-78127 | 3.7 | Sep 11 | libcharon in strongSwan 4.1.2 through 6.0.7 has a missing release of memory after its effective lifetime in the IKE message parser Affected: 4.1.2 before 6.1.0 |
| CVE-2026-78124 | 3.7 | Sep 11 | strongSwan 5.0.2 through 6.0.7 allows PKCS#7 certificate enumeration in the openssl plugin that leads to a lack of release of memory after its effective lifetime Affected: 5.0.2 before 6.1.0 |
| CVE-2019-10155 | 3.1 | Jun 12 | The Libreswan Project has found a vulnerability in the processing of IKEv1 informational exchange packets which are encrypted and integrity protected using the established IKE SA… Affected: before 5.0.0 |
Showing 4