The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
strongSwan 4.3.0 through 5.x before 5.3.2 and strongSwan VPN Client before 1.4.6, when using EAP or pre-shared keys for authenticating an IKEv2 connection, does not enforce server authentication restrictions until the entire authentication process is complete, which allows remote servers to obtain credentials by using a valid certificate and then reading the responses.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade strongswan | Jul 30, 2024 | Jun 10, 2015 |
| Freebsd | — | Upgrade strongswan | Dec 10, 2025 | Jun 9, 2015 |
| Huawei Euleros 2_0_sp2 | — | Upgrade strongimcv | Feb 22, 2021 | Jun 10, 2015 |
| Suse | — | Upgrade strongswan-libs0Upgrade strongswan-nmUpgrade strongswan-hmacUpgrade strongswan-ipsecUpgrade strongswanUpgrade strongswan-doc | Dec 18, 2015 | Jun 10, 2015 |
| Ubuntu | — | Upgrade strongswan-ike | Nov 8, 2024 | Jun 10, 2015 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub