strongSwan versions 4.2.0 through 6.0.7 contain a vulnerability in the x509 plugin's attribute certificate parser that can cause a NULL pointer dereference, leading to a denial of service. This vulnerability allows a remote attacker to crash the strongSwan service by sending crafted attribute certificates with missing issuer names. Ubuntu has released patches addressing this issue in multiple LTS releases.