strongSwan 5.0.2 through 6.0.7 allows PKCS#7 certificate enumeration in the openssl plugin that leads to a lack of release of memory after its effective lifetime.

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8789-1 advisory.

    It was discovered that strongSwan incorrectly handled PKCS#7 containers in the openssl plugin. A remote     attacker could possibly use this issue to cause strongSwan to crash, resulting in a denial of service.
    (CVE-2026-78123)

    It was discovered that strongSwan incorrectly handled memory when enumerating certificates in PKCS#7     containers in the openssl plugin. A remote attacker could possibly use this issue to obtain sensitive     information. (CVE-2026-78124)

    It was discovered that strongSwan incorrectly handled AKA-Synchronization-Failure messages in the eap-aka     plugin. A remote attacker could possibly use this issue to cause strongSwan to crash, resulting in a     denial of service. (CVE-2026-78126)

    It was discovered that strongSwan incorrectly handled memory when stringifying IKE messages. A remote     attacker could possibly use this issue to obtain sensitive information. (CVE-2026-78127)

    It was discovered that strongSwan incorrectly handled PKCS#5 decryption. A remote attacker could possibly     use this issue to cause strongSwan to consume excessive resources, leading to a denial of service.
    (CVE-2026-78129)

    It was discovered that strongSwan incorrectly handled attribute certificates in the x509 plugin when the     issuer name was missing. A remote attacker could possibly use this issue to cause strongSwan to crash,     resulting in a denial of service. (CVE-2026-78130)

    It was discovered that strongSwan incorrectly handled memory when parsing attribute certificates in the     x509 plugin. A remote attacker could possibly use this issue to obtain sensitive information.
    (CVE-2026-78131)

    It was discovered that strongSwan incorrectly handled attribute certificates containing ietfAttrSyntax     values in the x509 plugin. A remote attacker could possibly use this issue to cause strongSwan to consume     excessive resources, leading to a denial of service. (CVE-2026-78132)

    It was discovered that strongSwan incorrectly handled IKEv2 rekeying collisions with multi-key exchange. A     remote attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu     26.04 LTS. (CVE-2026-78133)

    It was discovered that strongSwan incorrectly validated inner EAP method authentication details in the     eap-ttls and eap-peap plugins. An authenticated user could possibly use this issue to bypass     authentication. (CVE-2026-78134)

    It was discovered that strongSwan incorrectly handled CREATE_CHILD_SA requests on unestablished IKE_SAs. A     remote attacker could possibly use this issue to bypass authentication. (CVE-2026-78135)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4146-1 advisory.

    - CVE-2026-78123: Undefined Memory Access When Handling PKCS#7 Containers (bsc#1276533).
    - CVE-2026-78124: Memory Leak When Processing Certificates in PKCS#7 Containers (bsc#1276534).
    - CVE-2026-78126: NULL-Pointer Dereference When Handling AKA-Synchronization-Failure (bsc#1276536).
    - CVE-2026-78127: Memory Leak During Message Stringification (bsc#1276539).
    - CVE-2026-78129: Unbounded Iteration When Decrypting PKCS#7 Containers (bsc#1276540).
    - CVE-2026-78130: NULL-Pointer Dereference in Attribute Certificate Validation (bsc#1276541).
    - CVE-2026-78131: Memory Leaks When Parsing Attribute Certificates (bsc#1276543).
    - CVE-2026-78132: Infinite Loop When Parsing Attribute Certificates (bsc#1276544).
    - CVE-2026-78134: Missing Inner EAP Method Authentication Details (bsc#1276548).
    - CVE-2026-78135: Creation of a Child SA Pre-Authentication (bsc#1276549).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4152-1 advisory.

    - CVE-2026-78123: Undefined Memory Access When Handling PKCS#7 Containers (bsc#1276533).
    - CVE-2026-78124: Memory Leak When Processing Certificates in PKCS#7 Containers (bsc#1276534).
    - CVE-2026-78126: NULL-Pointer Dereference When Handling AKA-Synchronization-Failure (bsc#1276536).
    - CVE-2026-78127: Memory Leak During Message Stringification (bsc#1276539).
    - CVE-2026-78129: Unbounded Iteration When Decrypting PKCS#7 Containers (bsc#1276540).
    - CVE-2026-78130: NULL-Pointer Dereference in Attribute Certificate Validation (bsc#1276541).
    - CVE-2026-78131: Memory Leaks When Parsing Attribute Certificates (bsc#1276543).
    - CVE-2026-78132: Infinite Loop When Parsing Attribute Certificates (bsc#1276544).
    - CVE-2026-78134: Missing Inner EAP Method Authentication Details (bsc#1276548).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4147-1 advisory.

    - CVE-2026-78123: Undefined Memory Access When Handling PKCS#7 Containers (bsc#1276533).
    - CVE-2026-78124: Memory Leak When Processing Certificates in PKCS#7 Containers (bsc#1276534).
    - CVE-2026-78126: NULL-Pointer Dereference When Handling AKA-Synchronization-Failure (bsc#1276536).
    - CVE-2026-78127: Memory Leak During Message Stringification (bsc#1276539).
    - CVE-2026-78129: Unbounded Iteration When Decrypting PKCS#7 Containers (bsc#1276540).
    - CVE-2026-78130: NULL-Pointer Dereference in Attribute Certificate Validation (bsc#1276541).
    - CVE-2026-78131: Memory Leaks When Parsing Attribute Certificates (bsc#1276543).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4115-1 advisory.

    - CVE-2026-47895: Double-Free When Destroying Certain Cloned Identities (bsc#1266360).
    - CVE-2026-78123: Undefined Memory Access When Handling PKCS#7 Containers (bsc#1276533).
    - CVE-2026-78124: Memory Leak When Processing Certificates in PKCS#7 Containers (bsc#1276534).
    - CVE-2026-78126: NULL-Pointer Dereference When Handling AKA-Synchronization-Failure (bsc#1276536).
    - CVE-2026-78127: Memory Leak During Message Stringification (bsc#1276539).
    - CVE-2026-78129: Unbounded Iteration When Decrypting PKCS#7 Containers (bsc#1276540).
    - CVE-2026-78130: NULL-Pointer Dereference in Attribute Certificate Validation (bsc#1276541).
    - CVE-2026-78131: Memory Leaks When Parsing Attribute Certificates (bsc#1276543).
    - CVE-2026-78132: Infinite Loop When Parsing Attribute Certificates (bsc#1276544).
    - CVE-2026-78134: Missing Inner EAP Method Authentication Details (bsc#1276548).
    - CVE-2026-78135: Creation of a Child SA Pre-Authentication (bsc#1276549).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the e627950e-ad4f-11f1-8656-000af7b98cf6 advisory.

    The strongSwan project reports:
    strongSwan 6.1.0 fixes eleven vulnerabilities:

Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - strongSwan 5.0.2 through 6.0.7 allows PKCS#7 certificate enumeration in the openssl plugin that leads to a     lack of release of memory after its effective lifetime. (CVE-2026-78124)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6487 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6487-1                   security@debian.org     https://www.debian.org/security/                        Yves-Alexis Perez     September 06, 2026                    https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : strongswan     CVE ID         : CVE-2026-78123 CVE-2026-78124 CVE-2026-78126 CVE-2026-78127                      CVE-2026-78129 CVE-2026-78130 CVE-2026-78131 CVE-2026-78132                      CVE-2026-78133 CVE-2026-78134 CVE-2026-78135

    Multiple vulnerabilities were found in strongSwan, an IKE/IPsec suite.

    CVE-2026-78123

        An undefined memory access vulnerability in the openssl plugin when         handling PKCS#7 containers, that can result in a crash.

    CVE-2026-78124

        A memory leak in the openssl plugin during the enumeration of certificates         in PKCS#7 containers.

    CVE-2026-78126

        A NULL-pointer dereference vulnerability in the eap-aka plugin when         processing an unexpected AKA-Synchronization-Failure message, that can         result in a crash.

    CVE-2026-78127

        Memory leak in libcharon message stringification during the logging of IKE         messages, that can result in a denial of service via memory exhaustion.

    CVE-2026-78129

        An unbounded iteration in libstrongswan when decrypting encrypted PKCS#7         containers, that can result in a denial of service.

    CVE-2026-78130

        A NULL-Pointer dereference vulnerability in the x509 plugin during the         verification of X.509 attribute certificates, that can lead to a denial of         service.

    CVE-2026-78131

        A memory leak in the x509 plugin during the parsing of identities in X.509         attribute certificates, that can lead to a denial of service.

    CVE-2026-78132

        An infinite loop vulnerability in the x509 plugin when parsing the         ietfAttrSyntax ASN.1 type in X.509 attribute certificates, that can lead to         a denial of service.

    CVE-2026-78133

        A vulnerability in libcharon when handling IKEv2 rekeying collisions, that         can result in a use-after-free and potentially remote code execution.

    CVE-2026-78134

        A vulnerability in the eap-peap and eap-ttls plugins in the propagation of         authentication details from inner EAP methods. Missing Inner EAP         authentication details can result in incorrect identity binding and         potential authorization bypass.

    CVE-2026-78135

        A vulnerability in libcharon when handling CREATE_CHILD_SA requests on         unestablished IKE SAs strongSwan, that can result in the creation of a         usable Child SA before authentication completes.

    For the stable distribution (trixie), these problems have been fixed in     version 6.0.1-6+deb13u7.

    We recommend that you upgrade your strongswan packages.

    For the detailed security status of strongswan please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/strongswan

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
350301	Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : strongSwan vulnerabilities (USN-8789-1)	Nessus	Ubuntu Local Security Checks	Local	high
346230	SUSE SLES15: strongswan / strongswan-doc / strongswan-hmac / strongswan-ipsec / etc (SUSE-SU-2026:4146-1)	Nessus	SuSE Local Security Checks	Local	high
346214	SUSE SLES15: strongswan / strongswan-doc / strongswan-hmac / strongswan-ipsec / etc (SUSE-SU-2026:4152-1)	Nessus	SuSE Local Security Checks	Local	high
346203	SUSE SLES12: strongswan / strongswan-doc / strongswan-hmac / strongswan-ipsec / etc (SUSE-SU-2026:4147-1)	Nessus	SuSE Local Security Checks	Local	low
345830	SUSE SLED15: strongswan / strongswan-doc / strongswan-hmac / strongswan-ipsec / etc (SUSE-SU-2026:4115-1)	Nessus	SuSE Local Security Checks	Local	high
345681	FreeBSD : strongSwan -- multiple vulnerabilities (e627950e-ad4f-11f1-8656-000af7b98cf6)	Nessus	FreeBSD Local Security Checks	Local	high
343501	Linux Distros Unpatched Vulnerability : CVE-2026-78124	Nessus	Misc.	Local	low
343484	Debian dsa-6487 : charon-cmd - security update	Nessus	Debian Local Security Checks	Local	high

Detections

Analytics

CVE-2026-78124

low

Tenable Plugins

high

high

high

low

high

high

low

high