A vulnerability in libcharon related to the handling of CREATE_CHILD_SA requests on unestablished IKE SAs was discovered in strongSwan that can result in the creation of a usable Child SA before authentication completes. All versions since 5.9.7 are affected.
A vulnerability in libcharon related to the handling of IKEv2 rekeying collisions was discovered in strongSwan that can result in a use-after-free and potentially remote code execution. All versions since 6.0.0 are affected.
A vulnerability in the eap-peap and eap-ttls plugins related to the propagation of authentication details from inner EAP methods was discovered in strongSwan that can result in incorrect identity binding and potential authorization bypass. All versions since 4.5.0 are affected.
A vulnerability in the x509 plugin related to the parsing of identities in X.509 attribute certificates was discovered in strongSwan that can lead to a denial of service via memory exhaustion. All versions since 4.2.0 are affected.
A vulnerability in the x509 plugin related to the parsing of the ietfAttrSyntax ASN.1 type in X.509 attribute certificates was discovered in strongSwan that can lead to a denial of service. All versions since 5.1.3 are affected.
A vulnerability in libcharon related to the logging of IKE messages was discovered in strongSwan that can result in a denial of service via memory exhaustion. All versions since 4.1.2 are affected.
A vulnerability in the x509 plugin related to the verification of X.509 attribute certificates was discovered in strongSwan that can lead to a denial of service. All versions since 4.2.0 are affected.
A vulnerability in libstrongswan related to the processing of encrypted PKCS#7 containers was discovered in strongSwan that can result in a denial of service. All versions since 4.6.2 are affected.