strongSwan Vulnerability Allows Denial of Service Attack

This advisory from CERT-Bund details a critical vulnerability (CVSS Base Score 7.5) in strongSwan, an IPSec-based VPN implementation. The vulnerability allows remote, anonymous attackers to exploit a flaw to cause a Denial of Service (DoS) attack. The advisory lists affected systems including SUSE Linux, Ubuntu Linux, and versions of Open Source strongSwan prior to 6.0.5, impacting Linux, UNIX, and Windows operating systems.

Organizations utilizing strongSwan should immediately review their configurations and apply available mitigations or update to patched versions if available. While this is a notice and not a rule, failure to address such vulnerabilities can lead to significant operational disruption and potential security breaches. Specific mitigation details are referenced but not provided in this summary. The advisory was published on March 23, 2026, with a temporal score update on March 24, 2026.