HIGH 7.5 NVD
CVE-2026-78132
strongSwan 5.1.3 through 6.0.7 has an infinite loop in the x509 plugin's attribute certificate parser for ietfAttrSyntax.
strongSwan 5.1.3 through 6.0.7 has an infinite loop in the x509 plugin's attribute certificate parser for ietfAttrSyntax.
Remediation
$ sudo apt install --only-upgrade strongswanReferences
- https://github.com/strongswan/strongswan/releases/tag/6.1.0
- https://www.strongswan.org/blog/2026/09/07/strongswan-vulnerability-(cve-2026-78132).html
This high severity vulnerability with a CVSS score of 7.5 was published on 2026-09-11 via NVD. A remediation command is available below.
vulnfeed aggregates 13138 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.