CVE-2026-47895

EUVD-2026-64602
In strongSwan before 6.0.7, identity parsing/cloning is mishandled. Parsed EAP-Identities that result in an empty but non-NULL encoding are not correctly cloned and trigger a double-free once the duplicates are destroyed.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
mitreCNA
7.5 HIGH
NETWORK
HIGH
LOW
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 37.41%
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
strongswanstrongswan
4.3.3 ≤
𝑥
< 6.0.7
CNA
Debian logo
Debian Releases
Debian Product
Codename
strongswan
bookworm
5.9.8-5+deb12u5
fixed
bookworm (security)
5.9.8-5+deb12u5
fixed
bullseye
vulnerable
bullseye (security)
vulnerable
forky
6.0.7-1
fixed
sid
6.0.7-1
fixed
trixie
6.0.1-6+deb13u6
fixed
trixie (security)
6.0.1-6+deb13u6
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
strongswan
bionic
needs-triage
focal
needs-triage
jammy
Fixed 5.9.5-2ubuntu2.7
released
noble
Fixed 5.9.13-2ubuntu4.24.04.4
released
questing
Fixed 6.0.1-6ubuntu4.4
released
resolute
Fixed 6.0.4-1ubuntu3.1
released
trusty
needs-triage
xenial
needs-triage
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
strongswan
suse enterprise server 12 SP3
5.1.3-26.38.1
fixed
suse enterprise server 12 SP5
5.1.3-26.38.1
fixed
suse enterprise server 15 SP4
5.9.11-150400.19.35.1
fixed
suse enterprise server 15 SP5
5.9.11-150500.5.23.2
fixed
strongswan-doc
suse enterprise server 12 SP3
5.1.3-26.38.1
fixed
suse enterprise server 12 SP5
5.1.3-26.38.1
fixed
suse enterprise server 15 SP4
5.9.11-150400.19.35.1
fixed
suse enterprise server 15 SP5
5.9.11-150500.5.23.2
fixed
strongswan-hmac
suse enterprise server 12 SP3
5.1.3-26.38.1
fixed
suse enterprise server 12 SP5
5.1.3-26.38.1
fixed
suse enterprise server 15 SP4
5.9.11-150400.19.35.1
fixed
suse enterprise server 15 SP5
5.9.11-150500.5.23.2
fixed
strongswan-ipsec
suse enterprise server 12 SP3
5.1.3-26.38.1
fixed
suse enterprise server 12 SP5
5.1.3-26.38.1
fixed
suse enterprise server 15 SP4
5.9.11-150400.19.35.1
fixed
suse enterprise server 15 SP5
5.9.11-150500.5.23.2
fixed
strongswan-libs0
suse enterprise server 12 SP3
5.1.3-26.38.1
fixed
suse enterprise server 12 SP5
5.1.3-26.38.1
fixed
suse enterprise server 15 SP4
5.9.11-150400.19.35.1
fixed
suse enterprise server 15 SP5
5.9.11-150500.5.23.2
fixed