The Libreswan Project (Www.Libreswan.Org) Libreswan vulnerabilities
2 vulnerabilities
Known vulnerabilities in The Libreswan Project (Www.Libreswan.Org) Libreswan, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
RoutineCVE-2024-3652the libreswan project (www.libreswan.org) · libreswan +8 moreIKEv1 default AH/ESP responder can cause libreswan to abort and restartThe Libreswan Project was notified of an issue causing libreswan to restart when using IKEv1 without specifying an esp= line. When the peer requests AES-GMAC, libreswan's default proposal handler causes an assertion failure and crashes and restarts. IKEv2 connections are not affected.CVSS6.5MediumEPSS0.80%RoutineCVE-2024-2357the libreswan project (www.libreswan.org) · libreswan +7 moreIKEv2 misconfiguration can cause libreswan to abort and restartThe Libreswan Project was notified of an issue causing libreswan to restart under some IKEv2 retransmit scenarios when a connection is configured to use PreSharedKeys (authby=secret) and the connection cannot find a matching configured secret. When such a connection is automatically added on startup using the auto= keyword, it can cause repeated crashes leading to a Denial of Service.CVSS6.5MediumEPSS0.95%