Skip to content
Threat Feed

Tag

StrongSwan

5 briefs RSS
medium advisory

strongSwan 5.9.13 Denial-of-Service Vulnerability (CVE-2026-35333)

A denial-of-service vulnerability exists in strongSwan version 5.9.13 due to a flaw in the eap-radius plugin when built with DAE enabled, allowing remote attackers to exhaust worker threads by sending a crafted RADIUS Access-Request (CVE-2026-35333).

strongSwan <= 5.9.13 denial-of-service radius strongswan CVE-2026-35333
2r 1t
critical advisory

strongSwan 5.9.13 libsimaka EAP-SIM/AKA Heap Buffer Overflow Vulnerability

A remote exploit is available for strongSwan 5.9.13 exploiting a heap buffer overflow in the libsimaka EAP-SIM/AKA module (CVE-2026-35330), enabling pre-authentication exploitation via a malformed EAP-SIM/AKA payload.

strongSwan <= 5.9.13 strongSwan heap-overflow eap-sim eap-aka CVE-2026-35330 exploit
2r 1t
high advisory

strongSwan eap-mschapv2 Plugin Vulnerability

A remote, anonymous attacker can exploit a vulnerability in strongSwan's eap-mschapv2 plugin to cause a denial of service condition or possibly execute arbitrary code.

strongSwan vulnerability denial-of-service
2r 2t
critical advisory

Multiple Vulnerabilities in strongSwan Enable Denial of Service and Code Execution

A remote, anonymous attacker can exploit multiple vulnerabilities in strongSwan to conduct a denial-of-service attack or potentially achieve arbitrary code execution.

strongSwan vpn denial-of-service code-execution
2r 2t
high advisory

strongSwan EAP-TTLS AVP Integer Underflow Vulnerability (CVE-2026-25075)

An integer underflow vulnerability in strongSwan's EAP-TTLS AVP parser allows unauthenticated remote attackers to cause a denial of service by sending crafted AVP data with invalid length fields during IKEv2 authentication, leading to excessive memory allocation or a NULL pointer dereference.

denial-of-service integer-underflow strongSwan CVE-2026-25075
2r 1t