strongSwan 5.0.2 through 5.1.0 allows remote attackers to cause a denial of service (NULL pointer dereference and charon daemon crash) via a crafted IKEv1 fragmentation packet.

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_1607 advisory.

    This advisory aggregates security fixes for the strongswan SRPM in CIQ LTS 8.6. It addresses 12 CVEs:
    CVE-2018-16152, CVE-2018-16151, CVE-2013-2944, CVE-2012-2388, CVE-2021-41990, and 7 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

strongSwan Project reports :

A DoS vulnerability triggered by crafted IKEv1 fragmentation payloads was discovered in strongSwan's IKE daemon charon. All versions since 5.0.2 are affected.

A DoS vulnerability and potential authorization bypass triggered by a crafted ID_DER_ASN1_DN ID payload was discovered in strongSwan. All versions since 4.3.3 are affected.

A DoS vulnerability in strongSwan was discovered, which is triggered by XAuth usernames and EAP identities in versions 5.0.3 and 5.0.4.

This is a major update that includes a version bump, build configuration changes and security updates.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Type	Severity
364607	Rocky Linux 8.6 [CIQ] Security Update: perl-vici / python3-vici / strongswan / strongswan-charon-nm / etc Multiple Vulnerabilities (ciqsa-2026_1607)	Nessus	Rocky Linux Local Security Checks	Local	critical
72156	FreeBSD : strongswan -- multiple DoS vulnerabilities (efa663eb-8754-11e3-9a47-00163e1ed244)	Nessus	FreeBSD Local Security Checks	Local	medium
72121	Fedora 19 : strongswan-5.1.1-4.fc19 (2014-0567)	Nessus	Fedora Local Security Checks	Local	medium
72120	Fedora 20 : strongswan-5.1.1-4.fc20 (2014-0516)	Nessus	Fedora Local Security Checks	Local	medium

Detections

Analytics

CVE-2013-6076

high

Tenable Plugins

critical

medium

medium

medium