CVE-2026-78135

Mô tả

Tham khảo

• strongswan/strongswan release 6.1.0 · Release Notes
• strongswan.org/blog/2026/09/07/strongswan-vulnerability-(cve-2026-78135).html · Vendor Advisory

Lỗ hổng khác của strongswan

• CVE-2026-78134CAO 7.1strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins because there can be a missing or mismatche…
• CVE-2026-78133CAO 7.5libcharon in strongSwan 6.0.0 through 6.0.7 has a use-after-free in IKEv2 rekeying collision handling.
• CVE-2026-78132CAO 7.5strongSwan 5.1.3 through 6.0.7 has an infinite loop in the x509 plugin's attribute certificate parser for ietfAttrSyntax.
• CVE-2026-78131THẤP 3.7strongSwan 4.2.0 through 6.0.7 has a missing release of memory after its effective lifetime in the x509 plugin's attribute certificate parse…
• CVE-2026-78130CAO 7.5strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute certificate parser.