ST
Vendor
strongSwan
53
CVEs
0
On KEV
0
New 30D
Products
ST9.8
strongSwan
strongSwan
51 CVEs0 on KEV0 new
ST7.5
strongMan
strongswan
1 CVEs0 on KEV0 new
SV–
Strongswan Vpn Client
Strongswan
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-78135 | ST strongSwan strongSwan | 7.3 | Sep 11 | libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state machine |
| CVE-2026-78134 | ST strongSwan strongSwan | 7.1 | Sep 11 | strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins because there can be a missing or mismatched inner EAP identity |
| CVE-2026-78133 | ST strongSwan strongSwan | 7.5 | Sep 11 | libcharon in strongSwan 6.0.0 through 6.0.7 has a use-after-free in IKEv2 rekeying collision handling |
| CVE-2026-78132 | ST strongSwan strongSwan | 7.5 | Sep 11 | strongSwan 5.1.3 through 6.0.7 has an infinite loop in the x509 plugin's attribute certificate parser for ietfAttrSyntax |
| CVE-2026-78131 | ST strongSwan strongSwan | 3.7 | Sep 11 | strongSwan 4.2.0 through 6.0.7 has a missing release of memory after its effective lifetime in the x509 plugin's attribute certificate parser |
| CVE-2026-78130 | ST strongSwan strongSwan | 7.5 | Sep 11 | strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute certificate parser |
| CVE-2026-78129 | ST strongSwan strongSwan | 5.9 | Sep 11 | strongSwan 4.6.2 through 6.0.7 has an infinite loop in PKCS#5 decryption |
| CVE-2026-78127 | ST strongSwan strongSwan | 3.7 | Sep 11 | libcharon in strongSwan 4.1.2 through 6.0.7 has a missing release of memory after its effective lifetime in the IKE message parser |
| CVE-2026-78126 | ST strongSwan strongSwan | 5.9 | Sep 11 | strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka plugin |
| CVE-2026-78124 | ST strongSwan strongSwan | 3.7 | Sep 11 | strongSwan 5.0.2 through 6.0.7 allows PKCS#7 certificate enumeration in the openssl plugin that leads to a lack of release of memory after its effective lifetime |
| CVE-2026-78123 | ST strongSwan strongSwan | 5.9 | Sep 11 | strongSwan 5.0.2 through 6.0.7 has an Expired Pointer Dereference in PKCS#7 parsing in the openssl plugin |
| CVE-2026-47895 | ST strongSwan strongSwan | 7.5 | Aug 22 | In strongSwan before 6.0.7, identity parsing/cloning is mishandled |
| CVE-2026-25075 | ST strongSwan strongSwan | 7.5 | Mar 23 | strongSwan 4.5.0 < 6.0.5 EAP-TTLS AVP Parsing Integer Underflow |
| CVE-2026-25998 | ST strongMan strongswan | 7.5 | Feb 19 | strongMan vulnerable to private credential recovery due to key and counter reuse |
| CVE-2025-62291 | ST strongSwan strongSwan | 8.1 | Jan 16 | In the eap-mschapv2 plugin (client-side) in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted message of size 6 through 8, and cause an integer underflow… |
| CVE-2022-4967 | ST Strongswan Strongswan | 6.5 | May 14 | strongSwan versions 5.9.2 through 5.9.5 are affected by authorization bypass through improper validation of certificate with host mismatch (CWE-297) |
| CVE-2023-41913 | ST Strongswan Strongswan | 9.8 | Dec 7 | strongSwan before 5.9.12 has a buffer overflow and possible unauthenticated remote code execution via a DH public value that exceeds the internal buffer in charon-tkm's DH proxy |
| CVE-2023-26463 | ST Strongswan Strongswan | 9.8 | Apr 15 | strongSwan 5.9.8 and 5.9.9 potentially allows remote code execution because it uses a variable named "public" for two different purposes within the same function |
| CVE-2022-40617 | ST Strongswan Strongswan | 7.5 | Oct 31 | strongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation plugin by sending a crafted end-entity (and intermediate CA) certificate that… |
| CVE-2021-45079 | ST Strongswan Strongswan | 9.1 | Jan 31 | In strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early without actually authenticating the client and (in the case of EAP methods with mutual… |
| CVE-2021-41991 | ST Strongswan Strongswan | 7.5 | Oct 18 | The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests with different certificates to fill the cache and later… |
| CVE-2021-41990 | ST Strongswan Strongswan | 7.5 | Oct 18 | The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate with an RSASSA-PSS signature |
| CVE-2019-10155 | ST Strongswan Strongswan | 3.1 | Jun 12 | The Libreswan Project has found a vulnerability in the processing of IKEv1 informational exchange packets which are encrypted and integrity protected using the established IKE SA… |
| CVE-2018-17540 | ST Strongswan Strongswan | 7.5 | Oct 3 | The gmp plugin in strongSwan before 5.7.1 has a Buffer Overflow via a crafted certificate |
| CVE-2018-16152 | ST Strongswan Strongswan | 7.5 | Sep 26 | In verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c in the gmp plugin in strongSwan 4.x and 5.x before 5.7.0, the RSA implementation based on GMP does not reject excess data… |
| CVE-2018-16151 | ST Strongswan Strongswan | 7.5 | Sep 26 | In verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c in the gmp plugin in strongSwan 4.x and 5.x before 5.7.0, the RSA implementation based on GMP does not reject excess data… |
| CVE-2018-10811 | ST Strongswan Strongswan | 7.5 | Jun 19 | strongSwan 5.6.0 and older allows Remote Denial of Service because of Missing Initialization of a Variable |
| CVE-2018-5388 | ST Strongswan Strongswan | 6.5 | May 31 | In stroke_socket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer underflow, which may lead to resource exhaustion and denial of service while… |
| CVE-2018-6459 | ST Strongswan Strongswan | 5.3 | Feb 20 | The rsa_pss_params_parse function in libstrongswan/credentials/keys/signature_params.c in strongSwan 5.6.1 allows remote attackers to cause a denial of service via a crafted… |
| CVE-2015-3991 | ST Strongswan Strongswan | 9.8 | Sep 7 | strongSwan 5.2.2 and 5.3.0 allows remote attackers to cause a denial of service (daemon crash) or execute arbitrary code |
| CVE-2017-11185 | ST Strongswan Strongswan | 7.5 | Aug 18 | The gmp plugin in strongSwan before 5.6.0 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted RSA signature |
| CVE-2017-9023 | ST Strongswan Strongswan | 7.5 | Jun 8 | The ASN.1 parser in strongSwan before 5.5.3 improperly handles CHOICE types when the x509 plugin is enabled, which allows remote attackers to cause a denial of service (infinite… |
| CVE-2017-9022 | ST Strongswan Strongswan | 7.5 | Jun 8 | The gmp plugin in strongSwan before 5.5.3 does not properly validate RSA public keys before calling mpz_powm_sec, which allows remote peers to cause a denial of service (floating… |
| CVE-2015-8023 | ST Strongswan Strongswan | – | Nov 18 | The server implementation of the EAP-MSCHAPv2 protocol in the eap-mschapv2 plugin in strongSwan 4.2.12 through 5.x before 5.3.4 does not properly validate local state, which… |
| CVE-2015-4171 | SV Strongswan Vpn Client Strongswan | – | Jun 10 | strongSwan 4.3.0 through 5.x before 5.3.2 and strongSwan VPN Client before 1.4.6, when using EAP or pre-shared keys for authenticating an IKEv2 connection, does not enforce server… |
| CVE-2014-9221 | ST Strongswan Strongswan | – | Jan 7 | strongSwan 4.5.x through 5.2.x before 5.2.1 allows remote attackers to cause a denial of service (invalid pointer dereference) via a crafted IKEv2 Key Exchange (KE) message with… |
| CVE-2014-2891 | ST Strongswan Strongswan | – | May 7 | strongSwan before 5.1.2 allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon crash) via a crafted ID_DER_ASN1_DN ID payload |
| CVE-2014-2338 | ST Strongswan Strongswan | – | Apr 16 | IKEv2 in strongSwan 4.0.7 before 5.1.3 allows remote attackers to bypass authentication by rekeying an IKE_SA during (1) initiation or (2) re-authentication, which triggers the… |
| CVE-2013-6076 | ST Strongswan Strongswan | – | Nov 2 | strongSwan 5.0.2 through 5.1.0 allows remote attackers to cause a denial of service (NULL pointer dereference and charon daemon crash) via a crafted IKEv1 fragmentation packet |
| CVE-2013-6075 | ST Strongswan Strongswan | – | Nov 2 | The compare_dn function in utils/identification.c in strongSwan 4.3.3 through 5.1.1 allows (1) remote attackers to cause a denial of service (out-of-bounds read, NULL pointer… |
| CVE-2013-5018 | ST Strongswan Strongswan | – | Aug 28 | The is_asn1 function in strongSwan 4.1.11 through 5.0.4 does not properly validate the return value of the asn1_length function, which allows remote attackers to cause a denial of… |
| CVE-2013-2054 | ST Strongswan Strongswan | – | Jul 9 | Buffer overflow in the atodn function in strongSwan 2.0.0 through 4.3.4, when Opportunistic Encryption is enabled and an RSA key is being used, allows remote attackers to cause a… |
| CVE-2013-2944 | ST Strongswan Strongswan | – | May 2 | strongSwan 4.3.5 through 5.0.3, when using the OpenSSL plugin for ECDSA signature verification, allows remote attackers to authenticate as other users via an invalid signature |
| CVE-2012-2388 | ST Strongswan Strongswan | – | Jun 27 | The GMP Plugin in strongSwan 4.2.0 through 4.6.3 allows remote attackers to bypass authentication via a (1) empty or (2) zeroed RSA signature, aka "RSA signature verification… |
| CVE-2010-2628 | ST Strongswan Strongswan | – | Aug 20 | The IKE daemon in strongSwan 4.3.x before 4.3.7 and 4.4.x before 4.4.1 does not properly check the return values of snprintf calls, which allows remote attackers to execute… |
| CVE-2009-2661 | ST Strongswan Strongswan | – | Aug 4 | The asn1_length function in strongSwan 2.8 before 2.8.11, 4.2 before 4.2.17, and 4.3 before 4.3.3 does not properly handle X.509 certificates with crafted Relative Distinguished… |
| CVE-2009-2185 | ST Strongswan Strongswan | – | Jun 25 | The ASN.1 parser (pluto/asn1.c, libstrongswan/asn1/asn1.c, libstrongswan/asn1/asn1_parser.c) in (a) strongSwan 2.8 before 2.8.10, 4.2 before 4.2.16, and 4.3 before 4.3.2; and (b)… |
| CVE-2009-1958 | ST Strongswan Strongswan | – | Jun 8 | charon/sa/tasks/child_create.c in the charon daemon in strongSWAN before 4.3.1 switches the NULL checks for TSi and TSr payloads, which allows remote attackers to cause a denial… |
| CVE-2009-1957 | ST Strongswan Strongswan | – | Jun 8 | charon/sa/ike_sa.c in the charon daemon in strongSWAN before 4.3.1 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an invalid… |
| CVE-2009-0790 | ST Strongswan Strongswan | – | Apr 1 | The pluto IKE daemon in Openswan and Strongswan IPsec 2.6 before 2.6.21 and 2.4 before 2.4.14, and Strongswan 4.2 before 4.2.14 and 2.8 before 2.8.9, allows remote attackers to… |
| CVE-2008-4551 | ST Strongswan Strongswan | – | Oct 14 | strongSwan 4.2.6 and earlier allows remote attackers to cause a denial of service (daemon crash) via an IKE_SA_INIT message with a large number of NULL values in a Key Exchange… |
| CVE-2004-0590 | ST Strongswan Strongswan | – | Dec 6 | FreeS/WAN 1.x and 2.x, and other related products including superfreeswan 1.x, openswan 1.x before 1.0.6, openswan 2.x before 2.1.4, and strongSwan before 2.1.3, allows remote… |