Known Vulnerabilities for products from StrongSwan
Listed below are 20 of the newest known vulnerabilities associated with the vendor "StrongSwan".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-78135 json | Not Provided | 2026-09-11 | 2026-09-11 | |
| CVE-2026-78134 json | Not Provided | 2026-09-11 | 2026-09-11 | |
| CVE-2026-78133 json | Not Provided | 2026-09-11 | 2026-09-11 | |
| CVE-2026-78132 json | Not Provided | 2026-09-11 | 2026-09-11 | |
| CVE-2026-78131 json | Not Provided | 2026-09-11 | 2026-09-11 | |
| CVE-2026-78130 json | Not Provided | 2026-09-11 | 2026-09-11 | |
| CVE-2026-78129 json | Not Provided | 2026-09-11 | 2026-09-11 | |
| CVE-2026-78127 json | Not Provided | 2026-09-11 | 2026-09-11 | |
| CVE-2026-78126 json | Not Provided | 2026-09-11 | 2026-09-11 | |
| CVE-2026-78124 json | Not Provided | 2026-09-11 | 2026-09-11 | |
| CVE-2023-26463 json | strongSwan 5.9.8 and 5.9.9 potentially allows remote code execution because it uses a variable named "public" for two differe... | 9.8 - CRITICAL | 2023-04-15 | 2023-05-17 |
| CVE-2022-40617 json | strongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation plugin by sending a crafted en... | 7.5 - HIGH | 2022-10-31 | 2023-11-07 |
| CVE-2021-45079 json | In strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early without actually authenticating t... | 9.1 - CRITICAL | 2022-01-31 | 2023-11-07 |
| CVE-2021-41991 json | The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests with di... | 7.5 - HIGH | 2021-10-18 | 2023-11-07 |
| CVE-2021-41990 json | The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate with an RSASSA-PSS signatur... | 7.5 - HIGH | 2021-10-18 | 2023-11-07 |
| CVE-2019-10155 json | The Libreswan Project has found a vulnerability in the processing of IKEv1 informational exchange packets which are encrypted... | 3.1 - LOW | 2019-06-12 | 2023-11-07 |
| CVE-2018-17540 json | The gmp plugin in strongSwan before 5.7.1 has a Buffer Overflow via a crafted certificate. | 7.5 - HIGH | 2018-10-03 | 2023-11-07 |
| CVE-2018-16152 json | In verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c in the gmp plugin in strongSwan 4.x and 5.x before 5.7.0, the RSA im... | 7.5 - HIGH | 2018-09-26 | 2023-11-07 |
| CVE-2018-16151 json | In verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c in the gmp plugin in strongSwan 4.x and 5.x before 5.7.0, the RSA im... | 7.5 - HIGH | 2018-09-26 | 2023-11-07 |
| CVE-2018-10811 json | strongSwan 5.6.0 and older allows Remote Denial of Service because of Missing Initialization of a Variable. | 7.5 - HIGH | 2018-06-19 | 2023-11-07 |
Known software with vulnerabilities from StrongSwan
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Strongswan | Davici | 0.1 |
| Application | Strongswan | Strongswan | 2.0.0 |
| Application | Strongswan | Strongswan Vpn Client | 1.4.5 |