PT-2026-35368 · Unknown · Strongswan

Published 2026-04-22 · Updated 2026-06-11 · CVE-2026-35332

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions strongswan versions prior to 6.0.6-1.1

Description A NULL-pointer dereference occurs when handling the ECDH (Elliptic Curve Diffie-Hellman) public value in TLS. This happens when the software attempts to access a memory location that is null, potentially leading to a crash.

Recommendations Update to version 6.0.6-1.1.

Related Identifiers

CVE-2026-35332

OPENSUSE-SU-2026:10623-1

SUSE-SU-2026:2368-1

USN-8196-1

USN-8196-2

Affected Products

Strongswan

References · 35

• https://osv.dev/vulnerability/USN-8196-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-35334 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10623-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-35328 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-35332 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2026:2368-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-35329 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-35332 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-35333 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-35330 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8196-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8196-2 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8196-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-35332 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-35332 · Vendor Advisory