https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T17:17:26.612974+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2022-avi-079 certfr-2022-avi-079 — Une vulnérabilité a été découverte dans strongSwan. Elle permet à un attaquant de provoquer un déni de service à distan… 2026-10-03T17:17:26.856303+00:00 certfr-2022-avi-079 https://cve.radiocsirt.org/vuln/euvd-2026-33199 EUVD-2026-33199 2026-10-03T17:17:26.856369+00:00 EUVD-2026-33199 https://cve.radiocsirt.org/vuln/fkie_cve-2021-45079 fkie_cve-2021-45079 2026-10-03T17:17:26.856386+00:00

In strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early without actually authenticating the client and (in the case of EAP methods with mutual authentication and EAP-only authentication for IKEv2) even without server authentication.

 https://cve.radiocsirt.org/vuln/ghsa-8x8f-8g3r-h75g GHSA-8x8f-8g3r-h75g 2026-10-03T17:17:26.856422+00:00

In strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early without actually authenticating the client and (in the case of EAP methods with mutual authentication and EAP-only authentication for IKEv2) even without server authentication.

 https://cve.radiocsirt.org/vuln/gsd-2021-45079 gsd-2021-45079 2026-10-03T17:17:26.856438+00:00 gsd-2021-45079 https://cve.radiocsirt.org/vuln/msrc_cve-2021-45079 msrc_CVE-2021-45079 — In strongSwan before 5.9.5 a malicious responder can send an EAP-Success message too early without actually authenticat… 2026-10-03T17:17:26.856450+00:00 msrc_CVE-2021-45079 https://cve.radiocsirt.org/vuln/oesa-2022-1525 OESA-2022-1525 — strongswan security update 2026-10-03T17:17:26.856467+00:00

Affected: openEuler:20.03-LTS-SP1: strongswan, openEuler:20.03-LTS-SP2: strongswan, openEuler:20.03-LTS-SP3: strongswan

The strongSwan IPsec implementation supports both the IKEv1 and IKEv2 key exchange protocols in conjunction with the native NETKEY IPsec stack of the Linux kernel. Security Fix(es): In strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early without actually authenticating the client and (in the case of EAP methods with mutual authentication and EAP-only authentication for IKEv2) even without server authentication.(CVE-2021-45079)

 https://cve.radiocsirt.org/vuln/opensuse-su-2022:0492-1 openSUSE-SU-2022:0492-1 — Security update for strongswan 2026-10-03T17:17:26.856495+00:00

Security update for strongswan

 https://cve.radiocsirt.org/vuln/suse-su-2022:0202-1 SUSE-SU-2022:0202-1 — Security update for strongswan 2026-10-03T17:17:26.856512+00:00

Security update for strongswan

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-45079 UBUNTU-CVE-2021-45079 2026-10-03T17:17:26.856527+00:00

Affected: Ubuntu:Pro:14.04:LTS: strongswan, Ubuntu:Pro:16.04:LTS: strongswan, Ubuntu:Pro:FIPS:16.04:LTS: strongswan, Ubuntu:18.04:LTS: strongswan, Ubuntu:Pro:FIPS-updates:18.04:LTS: strongswan, Ubuntu:Pro:FIPS:18.04:LTS: strongswan, Ubuntu:20.04:LTS: strongswan, Ubuntu:Pro:FIPS-updates:20.04:LTS: strongswan, Ubuntu:Pro:FIPS:20.04:LTS: strongswan, Ubuntu:22.04:LTS: strongswan

In strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early without actually authenticating the client and (in the case of EAP methods with mutual authentication and EAP-only authentication for IKEv2) even without server authentication.

 https://cve.radiocsirt.org/vuln/vde-2022-010 VDE-2022-010 — PHOENIX CONTACT: Multiple Linux component vulnerabilities fixed in latest AXC F x152 LTS release 2026-10-03T17:17:26.856564+00:00

PLCnext Control AXC F x152 is certified according to IEC 62443-4-1 and IEC 62443-4-2. This certification requires that all third-party components used in the firmware are regularly checked for known vulnerabilities.

Firmware components in version 2021.06 had already been updated. For the 2022.0 LTS version more firmware components have been updated implicitly fixing the vulnerabilities listed. The vulnerabilities listed above have not been individually verified in terms of actual impact and/or limitations in combination with the affected products listed. The current LTS release 2022.0 LTS contains updates of integrated third-party libraries, SDKs and other third-party software to address these issues nevertheless.

UPDATE A (April 4th, 2022): Added RFC 4072 (Art. No. 1051328) and fixed affected version of AXC F 3152

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1023 WID-SEC-W-2024-1023 — strongSwan: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2026-10-03T17:17:26.856690+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in strongSwan ausnutzen, um Sicherheitsvorkehrungen zu umgehen und einen Denial of Service Zustand herzustellen.