# libreswan.

Every CVE that names libreswan among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Null Pointer Dereference in PKCS#7 bundle with no certificates](https://agentprime.io/advisories/CVE-2026-77207.md)
  `CVE-2026-77207` · CVE record: The Libreswan Project libreswan · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption, CWE-252
- [IKEv2 pre-authentication Null Pointer Dereference in EAP code](https://agentprime.io/advisories/CVE-2026-77206.md)
  `CVE-2026-77206` · CVE record: The Libreswan Project libreswan · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Denial of Service via sending bogus X.509 certificates](https://agentprime.io/advisories/CVE-2026-77205.md)
  `CVE-2026-77205` · CVE record: The Libreswan Project libreswan · CVSS 3.7 Low · Not analysed yet · Published 13 Oct 2026 · Tags: Denial of service
- [IKEv2 Use-After-Free bug when using IKE-over-TCP](https://agentprime.io/advisories/CVE-2026-94453.md)
  `CVE-2026-94453` · CVE record: The Libreswan Project libreswan · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [FIPS mode assertion failure via malicious CERT payload](https://agentprime.io/advisories/CVE-2026-14957.md)
  `CVE-2026-14957` · CVE record: The Libreswan Project libreswan · CVSS 7.5 High · Not analysed yet · Published 2 Sept 2026 · Tags: Denial of service, CWE-252
- [IKEv1 Denial of Service via RSA-SHA1 (PKCS#1 Version 1.5 Encrypted) authentication payload](https://agentprime.io/advisories/CVE-2026-50721.md)
  `CVE-2026-50721` · CVE record: The Libreswan Project libreswan · CVSS 7.5 High · Not analysed yet · Published 2 Jul 2026 · Tags: Weak cryptography or TLS, Denial of service
- [IKEv2 Denial of Service via RSA-SHA1 (PKCS#1 RSASSA-PKCS1-v1_5) authentication payload](https://agentprime.io/advisories/CVE-2026-50722.md)
  `CVE-2026-50722` · CVE record: The Libreswan Project libreswan · CVSS 7.5 High · Not analysed yet · Published 2 Jul 2026 · Tags: Weak cryptography or TLS, Denial of service
- [IKEv2 Denial of Service via malformed fragmentation](https://agentprime.io/advisories/CVE-2026-12413.md)
  `CVE-2026-12413` · CVE record: The Libreswan Project libreswan · CVSS 7.5 High · Not analysed yet · Published 2 Jul 2026 · Tags: Denial of service, CWE-193
- [IKEv1 default AH/ESP responder can cause libreswan to abort and restart](https://agentprime.io/advisories/CVE-2024-3652.md)
  `CVE-2024-3652` · CVE record: The Libreswan Project (www\.libreswan.org) libreswan · CVSS 6.5 Medium · Not analysed yet · Published 11 Apr 2024 · Tags: Denial of service
- [IKEv2 misconfiguration can cause libreswan to abort and restart](https://agentprime.io/advisories/CVE-2024-2357.md)
  `CVE-2024-2357` · CVE record: The Libreswan Project (www\.libreswan.org) libreswan · CVSS 6.5 Medium · Not analysed yet · Published 11 Mar 2024
- [Uncontrolled resource consumption in libreswan](https://agentprime.io/advisories/CVE-2023-2295.md)
  `CVE-2023-2295` · CVE record: libreswan · CVSS 7.5 High · Not analysed yet · Published 17 May 2023 · Tags: Denial of service
- [Out-of-bounds read in libreswan](https://agentprime.io/advisories/CVE-2020-1763.md)
  `CVE-2020-1763` · CVE record: the libreswan Project libreswan · CVSS 7.5 High · Not analysed yet · Published 12 May 2020 · Tags: Memory corruption
- [libreswan: The Libreswan Project has found a vulnerability in the processing of IKEv1 informational…](https://agentprime.io/advisories/CVE-2019-10155.md)
  `CVE-2019-10155` · CVE record: the libreswan Project libreswan · CVSS 3.1 Low · Not analysed yet · Published 12 Jun 2019 · Tags: CWE-354

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=libreswan>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/libreswan/>. Everything for agents: <https://agentprime.io/llms.txt>.