https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T16:01:21.690736+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-0344 certfr-2026-avi-0344 — Une vulnérabilité a été découverte dans strongSwan. Elle permet à un attaquant de provoquer un déni de service à distan… 2026-10-03T16:01:21.839478+00:00 certfr-2026-avi-0344 https://cve.radiocsirt.org/vuln/euvd-2026-336571 EUVD-2026-336571 2026-10-03T16:01:21.839519+00:00 EUVD-2026-336571 https://cve.radiocsirt.org/vuln/fkie_cve-2026-25075 fkie_cve-2026-25075 2026-10-03T16:01:21.839533+00:00

strongSwan versions 4.5.0 prior to 6.0.5 contain an integer underflow vulnerability in the EAP-TTLS AVP parser that allows unauthenticated remote attackers to cause a denial of service by sending crafted AVP data with invalid length fields during IKEv2 authentication. Attackers can exploit the failure to validate AVP length fields before subtraction to trigger excessive memory allocation or NULL pointer dereference, crashing the charon IKE daemon.

 https://cve.radiocsirt.org/vuln/ghsa-frr2-5qjr-h4hw GHSA-frr2-5qjr-h4hw 2026-10-03T16:01:21.839563+00:00

strongSwan versions 4.5.0 prior to 6.0.5 contain an integer underflow vulnerability in the EAP-TTLS AVP parser that allows unauthenticated remote attackers to cause a denial of service by sending crafted AVP data with invalid length fields during IKEv2 authentication. Attackers can exploit the failure to validate AVP length fields before subtraction to trigger excessive memory allocation or NULL pointer dereference, crashing the charon IKE daemon.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-25075 msrc_CVE-2026-25075 — strongSwan 4.5.0 < 6.0.5 EAP-TTLS AVP Parsing Integer Underflow 2026-10-03T16:01:21.839580+00:00 msrc_CVE-2026-25075 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10441-1 openSUSE-SU-2026:10441-1 — strongswan-6.0.5-1.1 on GA media 2026-10-03T16:01:21.839597+00:00

strongswan-6.0.5-1.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2026:0978-1 SUSE-SU-2026:0978-1 — Security update for strongswan 2026-10-03T16:01:21.839612+00:00

Security update for strongswan

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-25075 UBUNTU-CVE-2026-25075 2026-10-03T16:01:21.839626+00:00

Affected: Ubuntu:Pro:14.04:LTS: strongswan, Ubuntu:Pro:16.04:LTS: strongswan, Ubuntu:Pro:FIPS:16.04:LTS: strongswan, Ubuntu:Pro:18.04:LTS: strongswan, Ubuntu:Pro:FIPS-updates:18.04:LTS: strongswan, Ubuntu:Pro:FIPS:18.04:LTS: strongswan, Ubuntu:20.04:LTS: strongswan, Ubuntu:Pro:FIPS-updates:20.04:LTS: strongswan, Ubuntu:Pro:FIPS:20.04:LTS: strongswan, Ubuntu:22.04:LTS: strongswan and 4 more

strongSwan versions 4.5.0 prior to 6.0.5 contain an integer underflow vulnerability in the EAP-TTLS AVP parser that allows unauthenticated remote attackers to cause a denial of service by sending crafted AVP data with invalid length fields during IKEv2 authentication. Attackers can exploit the failure to validate AVP length fields before subtraction to trigger excessive memory allocation or NULL pointer dereference, crashing the charon IKE daemon.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0825 WID-SEC-W-2026-0825 — strongSwan: Schwachstelle ermöglicht Denial of Service 2026-10-03T16:01:21.839671+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in strongSwan ausnutzen, um einen Denial of Service Angriff durchzuführen.