net-vpn/strongswan-6.0.3 — Security Advisories

▸ GLSA 202507-04 strongSwan: Buffer Overflow this version unaffected normal remote 2025-07-08

A buffer overflow has been discovered in strongSwan, which can lead to remote code execution.

Announced: 2025-07-08
Revised: 2025-07-08
Access: remote
Bugs: #920105
Advisory: https://security.gentoo.org/glsa/202507-04

Affected packages

Package	Arch	Vulnerable	Unaffected
net-vpn/strongswan	*	< 5.9.13	>= 5.9.13

Background

strongSwan is an IPSec implementation for Linux.

Description

Multiple vulnerabilities have been discovered in strongSwan. Please review the CVE identifiers referenced below for details.

Impact

A vulnerability in charon-tkm related to processing DH public values was discovered in strongSwan that can result in a buffer overflow and potentially remote code execution.

Workaround

There is no known workaround at this time.

Resolution

All strongSwan users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=net-vpn/strongswan-5.9.13"

References

CVE-2023-41913

▸ GLSA 202405-08 strongSwan: Multiple Vulnerabilities this version unaffected normal remote 2024-05-04

Multiple vulnerabilities have been discovered in strongSwan, the worst of which could possibly lead to remote code execution.

Announced: 2024-05-04
Revised: 2024-05-04
Access: remote
Bugs: #818841 #832460 #878887 #899964
Advisory: https://security.gentoo.org/glsa/202405-08

Affected packages

Package	Arch	Vulnerable	Unaffected
net-vpn/strongswan	*	< 5.9.10	>= 5.9.10

Background

strongSwan is an IPSec implementation for Linux.

Description

Multiple vulnerabilities have been discovered in strongSwan. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All strongSwan users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=net-vpn/strongswan-5.9.10"

References

▸ GLSA 201811-16 strongSwan: Multiple vulnerabilities this version unaffected normal remote 2018-11-26

Multiple vulnerabilities have been found in strongSwan, the worst of which could lead to a Denial of Service condition.

Announced: 2018-11-26
Revised: 2018-11-26
Access: remote
Bugs: #648610 #656338 #658230 #668862
Advisory: https://security.gentoo.org/glsa/201811-16

Affected packages

Package	Arch	Vulnerable	Unaffected
net-vpn/strongswan	*	< 5.7.1	>= 5.7.1

Background

strongSwan is an IPSec implementation for Linux.

Description

Multiple vulnerabilities have been discovered in strongSwan. Please review the CVE identifiers referenced below for details.

Impact

A remote attacker could cause a Denial of Service condition or impersonate a user.

Workaround

There is no known workaround at this time.

Resolution

All strongSwan users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=net-vpn/strongswan-5.7.1"