Advisories · Technology
libreswan.
Every CVE that names libreswan among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
Null Pointer Dereference in PKCS#7 bundle with no certificates
- libreswan
- Memory corruption
- CWE-252
- CVSS 7.5 High
IKEv2 pre-authentication Null Pointer Dereference in EAP code
- libreswan
- Memory corruption
- CVSS 3.7 Low
Denial of Service via sending bogus X.509 certificates
- libreswan
- Denial of service
- CVSS 7.5 High
IKEv2 Use-After-Free bug when using IKE-over-TCP
- libreswan
- Memory corruption
- CVSS 7.5 High
FIPS mode assertion failure via malicious CERT payload
- libreswan
- Denial of service
- CWE-252
- CVSS 7.5 High
IKEv1 Denial of Service via RSA-SHA1 (PKCS#1 Version 1.5 Encrypted) authentication payload
- libreswan
- Weak cryptography or TLS
- Denial of service
- CVSS 7.5 High
IKEv2 Denial of Service via RSA-SHA1 (PKCS#1 RSASSA-PKCS1-v1_5) authentication payload
- libreswan
- Weak cryptography or TLS
- Denial of service
- CVSS 7.5 High
IKEv2 Denial of Service via malformed fragmentation
- libreswan
- Denial of service
- CWE-193
- CVSS 6.5 Medium
IKEv1 default AH/ESP responder can cause libreswan to abort and restart
- libreswan
- Denial of service
- CVSS 6.5 Medium
IKEv2 misconfiguration can cause libreswan to abort and restart
- libreswan
- CVSS 7.5 High
Uncontrolled resource consumption in libreswan
- libreswan
- Denial of service
- CVSS 7.5 High
Out-of-bounds read in libreswan
- libreswan
- Memory corruption
- CVSS 3.1 Low
libreswan: The Libreswan Project has found a vulnerability in the processing of IKEv1 informational…
- libreswan
- CWE-354