ST
Product
strongSwan
51
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 18Medium 6Low 4
Watch
Add strongSwan to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-4967 | 6.5 | May 14 | strongSwan versions 5.9.2 through 5.9.5 are affected by authorization bypass through improper validation of certificate with host mismatch (CWE-297) Affected: 5.9.2 before 5.9.6 |
| CVE-2018-5388 | 6.5 | May 31 | In stroke_socket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer underflow, which may lead to resource exhaustion and denial of service while… Affected: before 5.6.3 |
| CVE-2026-78129 | 5.9 | Sep 11 | strongSwan 4.6.2 through 6.0.7 has an infinite loop in PKCS#5 decryption Affected: 4.6.2 before 6.1.0 |
| CVE-2026-78126 | 5.9 | Sep 11 | strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka plugin Affected: 4.1.10 before 6.1.0 |
| CVE-2026-78123 | 5.9 | Sep 11 | strongSwan 5.0.2 through 6.0.7 has an Expired Pointer Dereference in PKCS#7 parsing in the openssl plugin Affected: 5.0.2 before 6.1.0 |
| CVE-2018-6459 | 5.3 | Feb 20 | The rsa_pss_params_parse function in libstrongswan/credentials/keys/signature_params.c in strongSwan 5.6.1 allows remote attackers to cause a denial of service via a crafted… Affected: 5.6.1 |
Showing 6