Approved changes feed: RSS · Atom

cpe:2.3:a:strongswan:strongswan:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorStrongswan (9a563755-54e8-518c-a3b0-3167477e7a5c)
ProductStrongswan (09e669c3-3841-52c4-8ea4-6aa481714da4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/strongswan purl2cpe 2026-06-01 10:16:11.314693
pkg:deb/ubuntu/strongswan purl2cpe 2026-06-01 10:16:11.314695
pkg:docker/mberner/strongswan purl2cpe 2026-06-01 10:16:11.314697
pkg:github/strongswan/strongswan purl2cpe 2026-06-01 10:16:11.314699
pkg:npm/strongswan purl2cpe 2026-06-01 10:16:11.314701
pkg:rpm/fedora/strongswan purl2cpe 2026-06-01 10:16:11.314703
pkg:rpm/opensuse/strongswan purl2cpe 2026-06-01 10:16:11.314704
pkg:strongswan/strongswan purl2cpe 2026-06-01 10:16:11.314706

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-78133 vulnerable 2026-09-16 04:33:44.768550 Details available
HIGH (7.5)
libcharon in strongSwan 6.0.0 through 6.0.7 has a use-after-free in IKEv2 rekeying collision handling.
Published: 2026-09-11T01:52:30.872Z
Updated: 2026-09-11T16:54:19.406Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-78123 vulnerable 2026-09-16 04:33:44.685108 Details available
MEDIUM (5.9)
strongSwan 5.0.2 through 6.0.7 has an Expired Pointer Dereference in PKCS#7 parsing in the openssl plugin.
Published: 2026-09-11T01:26:21.394Z
Updated: 2026-09-15T15:25:26.253Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-78127 vulnerable 2026-09-16 04:33:44.682116 Details available
LOW (3.7)
libcharon in strongSwan 4.1.2 through 6.0.7 has a missing release of memory after its effective lifetime in the IKE message parser.
Published: 2026-09-11T01:37:05.572Z
Updated: 2026-09-11T17:22:42.244Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-78126 vulnerable 2026-09-16 04:33:44.646940 Details available
MEDIUM (5.9)
strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka plugin.
Published: 2026-09-11T01:33:50.717Z
Updated: 2026-09-14T18:18:37.226Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-78132 vulnerable 2026-09-16 04:33:44.620905 Details available
HIGH (7.5)
strongSwan 5.1.3 through 6.0.7 has an infinite loop in the x509 plugin's attribute certificate parser for ietfAttrSyntax.
Published: 2026-09-11T01:49:15.049Z
Updated: 2026-09-14T18:18:29.968Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-78124 vulnerable 2026-09-16 04:33:44.584856 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-78130 vulnerable 2026-09-16 04:33:44.560231 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-78134 vulnerable 2026-09-16 04:33:44.525603 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-78129 vulnerable 2026-09-16 04:33:44.502287 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-78131 vulnerable 2026-09-16 04:33:44.476447 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-78135 vulnerable 2026-09-16 04:33:44.450598 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-25075 vulnerable 2026-06-08 07:53:18.928651 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62291 vulnerable 2026-06-08 07:37:29.495735 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41913 vulnerable 2026-06-08 06:11:07.411910 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-4967 vulnerable 2026-06-08 05:52:02.326478 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40617 vulnerable 2026-06-08 05:48:27.719363 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45079 vulnerable 2026-06-08 05:36:47.780705 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-41991 vulnerable 2026-06-08 05:35:21.316352 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-41990 vulnerable 2026-06-08 05:35:21.293059 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10155 vulnerable 2026-06-08 05:12:22.351335 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-5389 vulnerable 2026-06-08 05:11:50.722633 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-5388 vulnerable 2026-06-08 05:11:50.721945 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-17540 vulnerable 2026-06-08 05:11:06.453857 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-16152 vulnerable 2026-06-08 05:11:04.292299 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-16151 vulnerable 2026-06-08 05:11:04.291239 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-10811 vulnerable 2026-06-08 05:10:37.118664 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-9023 vulnerable 2026-06-08 05:10:09.270591 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-9022 vulnerable 2026-06-08 05:10:09.269858 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-11185 vulnerable 2026-06-08 05:08:36.969591 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2891 vulnerable 2026-06-08 05:05:30.206702 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1958 vulnerable 2026-06-08 04:51:25.954979 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1957 vulnerable 2026-06-08 04:51:25.919748 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-4551 vulnerable 2026-06-08 04:50:39.241402 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0590 vulnerable 2026-06-08 04:47:50.466301 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.