CVE-2026-78127

Katalog CVE

CVSS 3.7 · Low EPSS 0,35%

Kerentanan Missing Release of Memory after Effective Lifetime pada strongswan. Skor CVSS 3.1 3.7 (Low) menurut mitre.org.

Deskripsi (NVD)

libcharon in strongSwan 4.1.2 through 6.0.7 has a missing release of memory after its effective lifetime in the IKE message parser.

Rincian

Terbit di NVD

11 September 2026

Terakhir diubah

14 September 2026

Status NVD

Analyzed

CVSS 3.1

3.7 (Low), sumber mitre.org
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-401: Missing Release of Memory after Effective Lifetime

EPSS (30 hari)

0,35% peluang dieksploitasi; lebih tinggi dari 27,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/strongswan/strongswan/releases/tag/6.1.0 patch · release notes · advisory vendor
• https://www.strongswan.org/blog/2026/09/07/strongswan-vulnerability-(cve-2026-78127).html mitigasi · advisory vendor