CVE-2018-10811: Canonical Ubuntu Linux

High severity, CVSS 7.5. EPSS: 6.2% chance of exploitation in the next 30 days.

strongSwan 5.6.0 and older allows Remote Denial of Service because of Missing Initialization of a Variable.

Affected products

• Canonical Ubuntu Linux: version 14.04 only; version 16.04 only; version 18.04 only
• Debian Debian Linux: version 8.0 only; version 9.0 only
• Fedoraproject Fedora: version 28 only
• Strongswan Strongswan: from 5.0.1, before 5.6.3 (fixed in 5.6.3)

Published 2018-06-19. Last modified 2026-06-17.