https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 21:38:15 +0000 https://vulnerability.circl.lu/vuln/cve-2026-78123 <p><strong>Affected:</strong> strongSwan</p> <p>strongSwan 5.0.2 through 6.0.7 has an Expired Pointer Dereference in PKCS#7 parsing in the openssl plugin.</p> <p><strong>Affected:</strong> strongSwan</p> <p>strongSwan 5.0.2 through 6.0.7 has an Expired Pointer Dereference in PKCS#7 parsing in the openssl plugin.</p> https://vulnerability.circl.lu/vuln/cve-2026-78123 https://vulnerability.circl.lu/vuln/usn-8789-1 <p><strong>Affected:</strong> Ubuntu:22.04:LTS: strongswan, Ubuntu:24.04:LTS: strongswan, Ubuntu:26.04:LTS: strongswan</p> <p>It was discovered that strongSwan incorrectly handled PKCS#7 containers in the openssl plugin. A remote attacker could possibly use this issue to cause strongSwan to crash, resulting in a denial of service. (CVE-2026-78123)</p> <p>It was discovered that strongSwan incorrectly handled memory when enumerating certificates in PKCS#7 containers in the openssl plugin. A remote attacker could possibly use this issue to obtain sensitive information. (CVE-2026-78124)</p> <p>It was discovered that strongSwan incorrectly handled AKA-Synchronization-Failure messages in the eap-aka plugin. A remote attacker could possibly use this issue to cause strongSwan to crash, resulting in a denial of service. (CVE-2026-78126)</p> <p>It was discovered that strongSwan incorrectly handled memory when stringifying IKE messages. A remote attacker could possibly use this issue to obtain sensitive information. (CVE-2026-78127)</p> <p>It was discovered that strongSwan incorrectly handled PKCS#5 decryption. A remote attacker could possibly use this issue to cause strongSwan to consume excessive resources, leading to a denial of service. (CVE-2026-78129)</p> <p>It was discovered that strongSwan incorrectly handled attribute certificates in the x509 plugin when the issuer name was missing. A remote attacker could possibly use this issue to cause strongSwan to crash, resulting in a denial of service. (CVE-2026-78130)</p> <p>It was discovered that strongSwan incorrectly handled memory when parsing attribute certificates in the x509 plugin. A re…</p> <p><strong>Affected:</strong> Ubuntu:22.04:LTS: strongswan, Ubuntu:24.04:LTS: strongswan, Ubuntu:26.04:LTS: strongswan</p> <p>It was discovered that strongSwan incorrectly handled PKCS#7 containers in the openssl plugin. A remote attacker could possibly use this issue to cause strongSwan to crash, resulting in a denial of service. (CVE-2026-78123)</p> <p>It was discovered that strongSwan incorrectly handled memory when enumerating certificates in PKCS#7 containers in the openssl plugin. A remote attacker could possibly use this issue to obtain sensitive information. (CVE-2026-78124)</p> <p>It was discovered that strongSwan incorrectly handled AKA-Synchronization-Failure messages in the eap-aka plugin. A remote attacker could possibly use this issue to cause strongSwan to crash, resulting in a denial of service. (CVE-2026-78126)</p> <p>It was discovered that strongSwan incorrectly handled memory when stringifying IKE messages. A remote attacker could possibly use this issue to obtain sensitive information. (CVE-2026-78127)</p> <p>It was discovered that strongSwan incorrectly handled PKCS#5 decryption. A remote attacker could possibly use this issue to cause strongSwan to consume excessive resources, leading to a denial of service. (CVE-2026-78129)</p> <p>It was discovered that strongSwan incorrectly handled attribute certificates in the x509 plugin when the issuer name was missing. A remote attacker could possibly use this issue to cause strongSwan to crash, resulting in a denial of service. (CVE-2026-78130)</p> <p>It was discovered that strongSwan incorrectly handled memory when parsing attribute certificates in the x509 plugin. A re…</p> https://vulnerability.circl.lu/vuln/usn-8789-1