The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8196-1 advisory.

    Haruto Kimura discovered that strongSwan incorrectly handled the supported_versions extension in TLS. A     remote attacker could possibly use this issue to cause strongSwan to stop responding, resulting in a     denial of service. (CVE-2026-35328)

    Haruto Kimura discovered that strongSwan incorrectly handled certain encrypted PKCS#7 containers. A remote     attacker could possibly use this issue to cause strongSwan to crash, resulting in a denial of service.
    (CVE-2026-35329)

    Lukas Johannes Moeller discovered that strongSwan incorrectly handled certain EAP-SIM/AKA attributes. A     remote attacker could use this issue to cause strongSwan to stop responding, resulting in a denial of     service, or possibly execute arbitrary code. (CVE-2026-35330)

    Haruto Kimura discovered that strongSwan incorrectly handled processing of X.509 name constraints. A     remote attacker could possibly use this issue to bypass excluded name constraints. (CVE-2026-35331)

    Haruto Kimura discovered that strongSwan incorrectly processed ECDH public values. A remote attacker could     possibly use this issue to cause strongSwan to crash, resulting in a denial of service. (CVE-2026-35332)

    Lukas Johannes Moeller discovered that strongSwan incorrectly handled certain RADIUS attributes. A remote     attacker could possibly use this issue to cause strongSwan to crash, resulting in a denial of service.
    (CVE-2026-35333)

    Ryo Shimada discovered that strongSwan incorrectly handled RSA decryption. A remote attacker could     possibly use this issue to cause strongSwan to crash, resulting in a denial of service. (CVE-2026-35334)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Ubuntu 22.04 LTS / 24.04 LTS / 25.10 : strongSwan vulnerabilities (USN-8196-1)

high Nessus Plugin ID 309912

Version 1.2

Version 1.1

Version 1.2 May 15, 2026, 12:01 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:POC/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:P/RL:O/RC:C") Exploit attributes ("Exploit available" set to "True") Exploit attributes ("Exploitability ease" changed from "No known exploits are available" to "Exploits are available") Plugin Feed: 202605151201
Version 1.1 Apr 23, 2026, 6:19 PM New Plugin Feed: 202604231819