Description
strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute certificate parser.
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
Debian DSA |
DSA-6487-1 | strongswan security update |
References
History
Fri, 11 Sep 2026 01:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute certificate parser. | |
| First Time appeared |
Strongswan
Strongswan strongswan |
|
| Weaknesses | CWE-476 | |
| CPEs | cpe:2.3:a:strongswan:strongswan:*:*:*:*:*:*:*:* | |
| Vendors & Products |
Strongswan
Strongswan strongswan |
|
| References |
| |
| Metrics |
cvssV3_1
|
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2026-09-11T01:43:43.954Z
Reserved: 2026-08-22T23:32:38.352Z
Link: CVE-2026-78130
No data.
No data.
No data.
OpenCVE Enrichment
No data.
Weaknesses
Debian DSA