Known vulnerabilities in strongswan-mysql
Vendor:
SUSE
Software:
strongswan-mysql
Software CPE:
cpe:2.3:o:suse:strongswan-mysql:*:*:*:*:*:suse_linux:*:*
Website:
https://www.suse.com/
Total vulnerabilities:
13
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
5.9.12-150600.3.23.2
5.9.11-150400.19.40.2
5.9.11-150500.5.28.2
5.9.11-150500.5.23.2
5.9.11-150400.19.35.1
5.9.12-150600.3.16.1
5.9.11-150400.19.26.1
5.9.12-150600.3.11.1
5.9.11-150500.5.14.1
5.9.11-150400.19.23.1
5.9.12-150600.3.8.1
5.9.11-150500.5.9.1
5.9.11-150400.19.20.1
5.9.12-150600.3.5.2
5.9.12-150600.3.2.1
5.9.11-150500.5.6.1
5.9.11-150400.19.17.2
5.8.2-150400.19.3.3
5.8.2-150200.11.30.1
Vulnerabilities (13)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU151590 - Missing release of memory after effective lifetime CVE-2026-78127 |
CWE-401 | Medium | 5.9.11-150400.19.40.2, 5.9.11-150500.5.28.2, 5.9.12-150600.3.23.2 | 22.09.2026 |
SB2026092230 SB2026092245 SB2026093056 and 4 more |
||
| #VU151589 - Unchecked Input for Loop Condition CVE-2026-78129 |
CWE-606 | Medium | 5.9.11-150400.19.40.2, 5.9.11-150500.5.28.2, 5.9.12-150600.3.23.2 | 22.09.2026 |
SB2026092230 SB2026092245 SB2026093056 and 4 more |
||
| #VU151588 - NULL Pointer Dereference CVE-2026-78130 |
CWE-476 | Medium | 5.9.11-150400.19.40.2, 5.9.11-150500.5.28.2, 5.9.12-150600.3.23.2 | 22.09.2026 |
SB2026092230 SB2026092245 SB2026093056 and 4 more |
||
| #VU151587 - Missing release of memory after effective lifetime CVE-2026-78131 |
CWE-401 | Medium | 5.9.11-150400.19.40.2, 5.9.11-150500.5.28.2, 5.9.12-150600.3.23.2 | 22.09.2026 |
SB2026092230 SB2026092245 SB2026093056 and 4 more |
||
| #VU151586 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2026-78132 |
CWE-835 | Medium | 5.9.11-150400.19.40.2, 5.9.11-150500.5.28.2, 5.9.12-150600.3.23.2 | 22.09.2026 |
SB2026092230 SB2026092245 SB2026093056 and 3 more |
||
| #VU151584 - Authentication Bypass by Spoofing CVE-2026-78134 |
CWE-290 | Low | 5.9.11-150400.19.40.2, 5.9.11-150500.5.28.2, 5.9.12-150600.3.23.2 | 22.09.2026 |
SB2026092230 SB2026092245 SB2026093056 and 3 more |
||
| #VU151583 - Improper Authentication CVE-2026-78135 |
CWE-287 | Medium | 5.9.11-150400.19.40.2 | 22.09.2026 |
SB2026092230 SB2026092245 SB2026093059 and 1 more |
||
| #VU151582 - Use of Uninitialized Variable CVE-2026-78123 |
CWE-457 | Medium | 5.9.11-150400.19.40.2, 5.9.11-150500.5.28.2, 5.9.12-150600.3.23.2 | 22.09.2026 |
SB2026092230 SB2026092245 SB2026093056 and 4 more |
||
| #VU151581 - Missing release of memory after effective lifetime CVE-2026-78124 |
CWE-401 | Medium | 5.9.11-150400.19.40.2, 5.9.11-150500.5.28.2, 5.9.12-150600.3.23.2 | 22.09.2026 |
SB2026092230 SB2026092245 SB2026093056 and 4 more |
||
| #VU151580 - NULL Pointer Dereference CVE-2026-78126 |
CWE-476 | Medium | 5.9.11-150400.19.40.2, 5.9.11-150500.5.28.2, 5.9.12-150600.3.23.2 | 22.09.2026 |
SB2026092230 SB2026092245 SB2026093056 and 4 more |
||
| #VU117683 - Integer underflow CVE-2025-62291 |
CWE-191 | High | 5.9.11-150400.19.20.1, 5.9.11-150500.5.9.1, 5.9.12-150600.3.5.2 | 27.10.2025 |
SB2025102750 SB2025102756 SB2025102759 and 16 more |
||
| #VU83305 - Memory corruption CVE-2023-41913 |
CWE-119 | High | 5.9.11-150400.19.17.2, 5.9.11-150500.5.6.1 | 20.11.2023 |
SB2023112058 SB2023112065 SB2023112102 and 14 more |
||
| #VU67813 - Improper Certificate Validation CVE-2022-40617 |
CWE-295 | Medium | 5.8.2-150200.11.30.1, 5.8.2-150400.19.3.3 | 03.10.2022 |
SB2022100335 SB2022100336 SB2022100345 and 10 more |