Suggestions search

All statuses

Filter by:

With package: strongswanNM

Found 13 matching suggestions

View:

Compact

Detailed

Untriaged

Permalink CVE-2026-78133

7.5 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): High (H)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): High (H)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

created 3 days, 20 hours ago Activity log

Created suggestion 3 days, 20 hours ago

libcharon in strongSwan 6.0.0 through 6.0.7 has a use-after-free in …

libcharon in strongSwan 6.0.0 through 6.0.7 has a use-after-free in IKEv2 rekeying collision handling.

References

Affected products

strongSwan

<6.1.0

Matching in nixpkgs

pkgs.strongswan

OpenSource IPsec-based VPN solution

nixos-unstable 6.0.7
- nixpkgs-unstable 6.0.7
- nixos-unstable-small 6.0.7
nixos-26.05 6.0.7
- nixos-26.05-small 6.1.0
- nixpkgs-26.05-darwin 6.0.7

pkgs.strongswanNM

OpenSource IPsec-based VPN solution

nixos-unstable 6.0.7
- nixpkgs-unstable 6.0.7
- nixos-unstable-small 6.0.7
nixos-26.05 6.0.7
- nixos-26.05-small 6.1.0
- nixpkgs-26.05-darwin 6.0.7

pkgs.strongswanTNC

OpenSource IPsec-based VPN solution

nixos-unstable 6.0.7
- nixpkgs-unstable 6.0.7
- nixos-unstable-small 6.0.7
nixos-26.05 6.0.7
- nixos-26.05-small 6.1.0
- nixpkgs-26.05-darwin 6.0.7

pkgs.strongswanTPM

OpenSource IPsec-based VPN solution

nixos-unstable 6.0.7
- nixpkgs-unstable 6.0.7
- nixos-unstable-small 6.0.7
nixos-26.05 6.0.7
- nixos-26.05-small 6.1.0
- nixpkgs-26.05-darwin 6.0.7

pkgs.networkmanager-strongswan

NetworkManager's strongswan plugin

nixos-unstable 1.6.5
- nixpkgs-unstable 1.6.5
- nixos-unstable-small 1.6.5
nixos-26.05 1.6.5
- nixos-26.05-small 1.6.5
- nixpkgs-26.05-darwin 1.6.5

pkgs.networkmanager_strongswan

NetworkManager's strongswan plugin

nixos-unstable 1.6.5
- nixpkgs-unstable 1.6.5
- nixos-unstable-small 1.6.5
nixos-26.05 1.6.5
- nixos-26.05-small 1.6.5
- nixpkgs-26.05-darwin 1.6.5

Package maintainers

@NickCao Nick Cao <nickcao@nichi.co>

Untriaged

Permalink CVE-2026-47895

7.5 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): High (H)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): High (H)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

created 3 weeks, 2 days ago Activity log

Created suggestion 3 weeks, 2 days ago

In strongSwan before 6.0.7, identity parsing/cloning is mishandled. Parsed EAP-Identities …

In strongSwan before 6.0.7, identity parsing/cloning is mishandled. Parsed EAP-Identities that result in an empty but non-NULL encoding are not correctly cloned and trigger a double-free once the duplicates are destroyed.

References

Affected products

strongSwan

<6.0.7

Matching in nixpkgs

pkgs.strongswan

OpenSource IPsec-based VPN solution

nixos-unstable 6.0.7
- nixpkgs-unstable 6.0.7
- nixos-unstable-small 6.0.7
nixos-26.05 6.0.7
- nixos-26.05-small 6.0.7
- nixpkgs-26.05-darwin 6.0.7

pkgs.strongswanNM

OpenSource IPsec-based VPN solution

nixos-unstable 6.0.7
- nixpkgs-unstable 6.0.7
- nixos-unstable-small 6.0.7
nixos-26.05 6.0.7
- nixos-26.05-small 6.0.7
- nixpkgs-26.05-darwin 6.0.7

pkgs.strongswanTNC

OpenSource IPsec-based VPN solution

nixos-unstable 6.0.7
- nixpkgs-unstable 6.0.7
- nixos-unstable-small 6.0.7
nixos-26.05 6.0.7
- nixos-26.05-small 6.0.7
- nixpkgs-26.05-darwin 6.0.7

pkgs.strongswanTPM

OpenSource IPsec-based VPN solution

nixos-unstable 6.0.7
- nixpkgs-unstable 6.0.7
- nixos-unstable-small 6.0.7
nixos-26.05 6.0.7
- nixos-26.05-small 6.0.7
- nixpkgs-26.05-darwin 6.0.7

pkgs.networkmanager-strongswan

NetworkManager's strongswan plugin

nixos-unstable 1.6.5
- nixpkgs-unstable 1.6.5
- nixos-unstable-small 1.6.5
nixos-26.05 1.6.5
- nixos-26.05-small 1.6.5
- nixpkgs-26.05-darwin 1.6.5

pkgs.networkmanager_strongswan

NetworkManager's strongswan plugin

nixos-unstable 1.6.5
- nixpkgs-unstable 1.6.5
- nixos-unstable-small 1.6.5
nixos-26.05 1.6.5
- nixos-26.05-small 1.6.5
- nixpkgs-26.05-darwin 1.6.5

Package maintainers

@NickCao Nick Cao <nickcao@nichi.co>

Untriaged

Permalink CVE-2026-25075

7.5 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): None (N)
Integrity (I): None (N)
Availability (A): High (H)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): High (H)

created 5 months, 3 weeks ago Activity log

Created suggestion 5 months, 3 weeks ago

strongSwan 4.5.0 < 6.0.5 EAP-TTLS AVP Parsing Integer Underflow

strongSwan versions 4.5.0 prior to 6.0.5 contain an integer underflow vulnerability in the EAP-TTLS AVP parser that allows unauthenticated remote attackers to cause a denial of service by sending crafted AVP data with invalid length fields during IKEv2 authentication. Attackers can exploit the failure to validate AVP length fields before subtraction to trigger excessive memory allocation or NULL pointer dereference, crashing the charon IKE daemon.