A high severity double free vulnerability in strongSwan may allow an authenticated attacker to compromise system integrity or availability.

This vulnerability is classified as a double free (CWE-415), which occurs when the application attempts to deallocate memory that has already been freed. An authenticated remote attacker can trigger this flaw to cause a denial of service or potentially achieve arbitrary code execution.

The exploitation of this vulnerability could lead to total service disruption or unauthorized control over the VPN infrastructure. With a CVSS score of 7.5, it represents a significant risk to network security, as strongSwan is often a critical component for secure communication tunnels.

Immediate Action: Upgrade to strongSwan version 6.0.7 or later as provided by the vendor.

Proactive Monitoring: Monitor VPN gateway logs for unexpected process crashes or segmentation faults that may indicate an exploitation attempt.

Compensating Controls: Ensure that access to the strongSwan management interface is restricted to authorized personnel only to limit the pool of potential attackers.

Public Exploit Available: No (exploit_available: false)

Given the potential for code execution, administrators should prioritize updating strongSwan to version 6.0.7. Testing the update in a staging environment is advised to ensure compatibility with existing VPN configurations before deploying to production.