https://download.strongswan.org/strongswan-5.9.13.tar.bz2 · strongSwan 5.9.13 · DoS
Affects https://download.strongswan.org/strongswan-5.9.13.tar.bz2Source Exploit-DB RSS Feed
Public exploit available (Exploit-DB).
Data as of 10 Aug 2026, 21:19 UTC
Rated by Threat Radar · No CVSS score from NVD or the CNA
Exploitation evidence
Disclosed: evidence found.
Public on cve.org; its publication date is not in this record
Detectable: no evidence on record.
No public nuclei template indexed
Weaponized: evidence found.
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 29 Oct 2026.
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| https://www.strongswan.org https://download.strongswan.org/strongswan-5.9.13.tar.bz2 | Affected
| Fixed in– |
AI-suggested
Until a fix is available, consider limiting exposure of the affected service to untrusted networks.
Description
strongSwan 5.9.13 - DoS
Indicators of compromise
Exploit source code
# Exploit Title: strongSwan 5.9.13 - DoS
# Date: 2026-05-13
# Exploit Author: Lukas Johannes Moeller
# Vendor Homepage: https://www.strongswan.org/
# Software Link: https://download.strongswan.org/strongswan-5.9.13.tar.bz2
# Version: strongSwan <= 5.9.13 (eap-radius plugin built with DAE enabled)
# Tested on: Debian 12 bookworm, charon 5.9.13 built from upstream tarball,
# strongswan.conf charon.plugins.eap-radius.dae.enable = yes,
# listener bound on UDP/3799
# CVE: CVE-20…