CVE-2026-78124

Katalog CVE

CVSS 3.7 · Low EPSS 0,19%

Kerentanan Missing Release of Memory after Effective Lifetime pada strongswan. Skor CVSS 3.1 3.7 (Low) menurut mitre.org.

Deskripsi (NVD)

strongSwan 5.0.2 through 6.0.7 allows PKCS#7 certificate enumeration in the openssl plugin that leads to a lack of release of memory after its effective lifetime.

Rincian

Terbit di NVD

11 September 2026

Terakhir diubah

14 September 2026

Status NVD

Analyzed

CVSS 3.1

3.7 (Low), sumber mitre.org
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-401: Missing Release of Memory after Effective Lifetime

EPSS (30 hari)

0,19% peluang dieksploitasi; lebih tinggi dari 8,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/strongswan/strongswan/releases/tag/6.1.0 patch · release notes · advisory vendor
• https://www.strongswan.org/blog/2026/09/07/strongswan-vulnerability-(cve-2026-78124).html mitigasi · advisory vendor