USN-8196-1 (UBUNTU-CVE-2026-35328)

Vulnerability from osv_ubuntu – Published: 2026-04-22 12:46 – Updated: 2026-04-27 14:11 – Source website
VLAI
Summary
strongswan vulnerabilities
Details

Haruto Kimura discovered that strongSwan incorrectly handled the supported_versions extension in TLS. A remote attacker could possibly use this issue to cause strongSwan to stop responding, resulting in a denial of service. (CVE-2026-35328)

Haruto Kimura discovered that strongSwan incorrectly handled certain encrypted PKCS#7 containers. A remote attacker could possibly use this issue to cause strongSwan to crash, resulting in a denial of service. (CVE-2026-35329)

Lukas Johannes Moeller discovered that strongSwan incorrectly handled certain EAP-SIM/AKA attributes. A remote attacker could use this issue to cause strongSwan to stop responding, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2026-35330)

Haruto Kimura discovered that strongSwan incorrectly handled processing of X.509 name constraints. A remote attacker could possibly use this issue to bypass excluded name constraints. (CVE-2026-35331)

Haruto Kimura discovered that strongSwan incorrectly processed ECDH public values. A remote attacker could possibly use this issue to cause strongSwan to crash, resulting in a denial of service. (CVE-2026-35332)

Lukas Johannes Moeller discovered that strongSwan incorrectly handled certain RADIUS attributes. A remote attacker could possibly use this issue to cause strongSwan to crash, resulting in a denial of service. (CVE-2026-35333)

Ryo Shimada discovered that strongSwan incorrectly handled RSA decryption. A remote attacker could possibly use this issue to cause strongSwan to crash, resulting in a denial of service. (CVE-2026-35334)

References
To clipboard 

{
  "affected": [
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2026-35328",
              "severity": [
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-35329",
              "severity": [
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-35330",
              "severity": [
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-35331",
              "severity": [
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-35332",
              "severity": [
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-35333",
              "severity": [
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-35334",
              "severity": [
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:22.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "charon-cmd",
            "binary_version": "5.9.5-2ubuntu2.6"
          },
          {
            "binary_name": "charon-systemd",
            "binary_version": "5.9.5-2ubuntu2.6"
          },
          {
            "binary_name": "libcharon-extauth-plugins",
            "binary_version": "5.9.5-2ubuntu2.6"
          },
          {
            "binary_name": "libcharon-extra-plugins",
            "binary_version": "5.9.5-2ubuntu2.6"
          },
          {
            "binary_name": "libstrongswan",
            "binary_version": "5.9.5-2ubuntu2.6"
          },
          {
            "binary_name": "libstrongswan-extra-plugins",
            "binary_version": "5.9.5-2ubuntu2.6"
          },
          {
            "binary_name": "libstrongswan-standard-plugins",
            "binary_version": "5.9.5-2ubuntu2.6"
          },
          {
            "binary_name": "strongswan",
            "binary_version": "5.9.5-2ubuntu2.6"
          },
          {
            "binary_name": "strongswan-charon",
            "binary_version": "5.9.5-2ubuntu2.6"
          },
          {
            "binary_name": "strongswan-libcharon",
            "binary_version": "5.9.5-2ubuntu2.6"
          },
          {
            "binary_name": "strongswan-nm",
            "binary_version": "5.9.5-2ubuntu2.6"
          },
          {
            "binary_name": "strongswan-pki",
            "binary_version": "5.9.5-2ubuntu2.6"
          },
          {
            "binary_name": "strongswan-scepclient",
            "binary_version": "5.9.5-2ubuntu2.6"
          },
          {
            "binary_name": "strongswan-starter",
            "binary_version": "5.9.5-2ubuntu2.6"
          },
          {
            "binary_name": "strongswan-swanctl",
            "binary_version": "5.9.5-2ubuntu2.6"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "strongswan",
        "purl": "pkg:deb/ubuntu/strongswan@5.9.5-2ubuntu2.6?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.9.5-2ubuntu2.6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.9.1-1ubuntu3",
        "5.9.1-1ubuntu3.1",
        "5.9.4-1ubuntu1",
        "5.9.4-1ubuntu2",
        "5.9.4-1ubuntu3",
        "5.9.4-1ubuntu4",
        "5.9.5-2ubuntu1",
        "5.9.5-2ubuntu2",
        "5.9.5-2ubuntu2.1",
        "5.9.5-2ubuntu2.2",
        "5.9.5-2ubuntu2.3",
        "5.9.5-2ubuntu2.4",
        "5.9.5-2ubuntu2.5"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2026-35328",
              "severity": [
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-35329",
              "severity": [
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-35330",
              "severity": [
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-35331",
              "severity": [
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-35332",
              "severity": [
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-35333",
              "severity": [
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-35334",
              "severity": [
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:24.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "charon-cmd",
            "binary_version": "5.9.13-2ubuntu4.24.04.3"
          },
          {
            "binary_name": "charon-systemd",
            "binary_version": "5.9.13-2ubuntu4.24.04.3"
          },
          {
            "binary_name": "libcharon-extauth-plugins",
            "binary_version": "5.9.13-2ubuntu4.24.04.3"
          },
          {
            "binary_name": "libcharon-extra-plugins",
            "binary_version": "5.9.13-2ubuntu4.24.04.3"
          },
          {
            "binary_name": "libstrongswan",
            "binary_version": "5.9.13-2ubuntu4.24.04.3"
          },
          {
            "binary_name": "libstrongswan-extra-plugins",
            "binary_version": "5.9.13-2ubuntu4.24.04.3"
          },
          {
            "binary_name": "libstrongswan-standard-plugins",
            "binary_version": "5.9.13-2ubuntu4.24.04.3"
          },
          {
            "binary_name": "strongswan",
            "binary_version": "5.9.13-2ubuntu4.24.04.3"
          },
          {
            "binary_name": "strongswan-charon",
            "binary_version": "5.9.13-2ubuntu4.24.04.3"
          },
          {
            "binary_name": "strongswan-libcharon",
            "binary_version": "5.9.13-2ubuntu4.24.04.3"
          },
          {
            "binary_name": "strongswan-nm",
            "binary_version": "5.9.13-2ubuntu4.24.04.3"
          },
          {
            "binary_name": "strongswan-pki",
            "binary_version": "5.9.13-2ubuntu4.24.04.3"
          },
          {
            "binary_name": "strongswan-starter",
            "binary_version": "5.9.13-2ubuntu4.24.04.3"
          },
          {
            "binary_name": "strongswan-swanctl",
            "binary_version": "5.9.13-2ubuntu4.24.04.3"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "strongswan",
        "purl": "pkg:deb/ubuntu/strongswan@5.9.13-2ubuntu4.24.04.3?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.9.13-2ubuntu4.24.04.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.9.11-1ubuntu1",
        "5.9.11-1ubuntu2",
        "5.9.12-1ubuntu1",
        "5.9.13-2ubuntu1",
        "5.9.13-2ubuntu3",
        "5.9.13-2ubuntu4",
        "5.9.13-2ubuntu4.24.04.1",
        "5.9.13-2ubuntu4.24.04.2"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2026-35328",
              "severity": [
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-35329",
              "severity": [
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-35330",
              "severity": [
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-35331",
              "severity": [
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-35332",
              "severity": [
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-35333",
              "severity": [
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-35334",
              "severity": [
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:25.10"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "charon-cmd",
            "binary_version": "6.0.1-6ubuntu4.3"
          },
          {
            "binary_name": "charon-systemd",
            "binary_version": "6.0.1-6ubuntu4.3"
          },
          {
            "binary_name": "libcharon-extauth-plugins",
            "binary_version": "6.0.1-6ubuntu4.3"
          },
          {
            "binary_name": "libcharon-extra-plugins",
            "binary_version": "6.0.1-6ubuntu4.3"
          },
          {
            "binary_name": "libstrongswan",
            "binary_version": "6.0.1-6ubuntu4.3"
          },
          {
            "binary_name": "libstrongswan-extra-plugins",
            "binary_version": "6.0.1-6ubuntu4.3"
          },
          {
            "binary_name": "libstrongswan-standard-plugins",
            "binary_version": "6.0.1-6ubuntu4.3"
          },
          {
            "binary_name": "strongswan",
            "binary_version": "6.0.1-6ubuntu4.3"
          },
          {
            "binary_name": "strongswan-charon",
            "binary_version": "6.0.1-6ubuntu4.3"
          },
          {
            "binary_name": "strongswan-libcharon",
            "binary_version": "6.0.1-6ubuntu4.3"
          },
          {
            "binary_name": "strongswan-nm",
            "binary_version": "6.0.1-6ubuntu4.3"
          },
          {
            "binary_name": "strongswan-pki",
            "binary_version": "6.0.1-6ubuntu4.3"
          },
          {
            "binary_name": "strongswan-starter",
            "binary_version": "6.0.1-6ubuntu4.3"
          },
          {
            "binary_name": "strongswan-swanctl",
            "binary_version": "6.0.1-6ubuntu4.3"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:25.10",
        "name": "strongswan",
        "purl": "pkg:deb/ubuntu/strongswan@6.0.1-6ubuntu4.3?arch=source\u0026distro=questing"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.0.1-6ubuntu4.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.9.13-2ubuntu4",
        "5.9.13-2ubuntu5",
        "6.0.1-6ubuntu2",
        "6.0.1-6ubuntu4",
        "6.0.1-6ubuntu4.1",
        "6.0.1-6ubuntu4.2"
      ]
    }
  ],
  "aliases": [],
  "details": "Haruto Kimura discovered that strongSwan incorrectly handled the\nsupported_versions extension in TLS. A remote attacker could possibly use\nthis issue to cause strongSwan to stop responding, resulting in a denial\nof service. (CVE-2026-35328)\n\nHaruto Kimura discovered that strongSwan incorrectly handled certain\nencrypted PKCS#7 containers. A remote attacker could possibly use this\nissue to cause strongSwan to crash, resulting in a denial of service.\n(CVE-2026-35329)\n\nLukas Johannes Moeller discovered that strongSwan incorrectly handled\ncertain EAP-SIM/AKA attributes. A remote attacker could use this issue to\ncause strongSwan to stop responding, resulting in a denial of service, or\npossibly execute arbitrary code. (CVE-2026-35330)\n\nHaruto Kimura discovered that strongSwan incorrectly handled processing of\nX.509 name constraints. A remote attacker could possibly use this issue to\nbypass excluded name constraints. (CVE-2026-35331)\n\nHaruto Kimura discovered that strongSwan incorrectly processed ECDH public\nvalues. A remote attacker could possibly use this issue to cause strongSwan\nto crash, resulting in a denial of service. (CVE-2026-35332)\n\nLukas Johannes Moeller discovered that strongSwan incorrectly handled\ncertain RADIUS attributes. A remote attacker could possibly use this issue\nto cause strongSwan to crash, resulting in a denial of service.\n(CVE-2026-35333)\n\nRyo Shimada discovered that strongSwan incorrectly handled RSA decryption.\nA remote attacker could possibly use this issue to cause strongSwan to\ncrash, resulting in a denial of service. (CVE-2026-35334)",
  "id": "USN-8196-1",
  "modified": "2026-04-27T14:11:51Z",
  "published": "2026-04-22T12:46:23Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-8196-1"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2026-35328"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2026-35329"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2026-35330"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2026-35331"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2026-35332"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2026-35333"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2026-35334"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "summary": "strongswan vulnerabilities",
  "upstream": [
    "UBUNTU-CVE-2026-35328",
    "UBUNTU-CVE-2026-35329",
    "UBUNTU-CVE-2026-35330",
    "UBUNTU-CVE-2026-35331",
    "UBUNTU-CVE-2026-35332",
    "UBUNTU-CVE-2026-35333",
    "UBUNTU-CVE-2026-35334"
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.