strongSwan 4.2.0 through 6.0.7 has a missing release of memory after its effective lifetime in the x509 plugin's attribute certificate parser.
CVE-2026-78131
Scope
What the vendor says is affected
- azl3 strongswan 5.9.14-10 on Azure Linux 3.0
Next step
What the vendor recommends
See the Microsoft Security Update Guide for the update that applies to your product.
Review the complete instructions on the vendor's siteTimeline
When this advisory changed
- Published by Microsoft Security Response Center
The publication date reported by the vendor.
- Updated by Microsoft Security Response Center
The vendor changed the advisory after it was first published.
- Added to SecurityAlert
We collected the advisory from the official source.
Vulnerabilities