https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T15:38:42.992175+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2022:0199 ALSA-2022:0199 — Important: libreswan security update 2026-10-03T15:38:43.132756+00:00

Affected: AlmaLinux:8: libreswan

Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network (VPN).

Security Fix(es):

* libreswan: Malicious IKEv1 packet can cause libreswan to restart (CVE-2022-23094)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/cnvd-2022-15522 cnvd-2022-15522 2026-10-03T15:38:43.132817+00:00 cnvd-2022-15522 https://cve.radiocsirt.org/vuln/euvd-2026-13708 EUVD-2026-13708 2026-10-03T15:38:43.132836+00:00 EUVD-2026-13708 https://cve.radiocsirt.org/vuln/fkie_cve-2022-23094 fkie_cve-2022-23094 2026-10-03T15:38:43.132848+00:00

Libreswan 4.2 through 4.5 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted IKEv1 packet because pluto/ikev1.c wrongly expects that a state object exists. This is fixed in 4.6.

 https://cve.radiocsirt.org/vuln/ghsa-m3gq-3gw9-x3fv GHSA-m3gq-3gw9-x3fv 2026-10-03T15:38:43.132870+00:00

Libreswan 4.2 through 4.5 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted IKEv1 packet because pluto/ikev1.c wrongly expects that a state object exists. This is fixed in 4.6.

 https://cve.radiocsirt.org/vuln/gsd-2022-23094 gsd-2022-23094 2026-10-03T15:38:43.132885+00:00 gsd-2022-23094 https://cve.radiocsirt.org/vuln/oesa-2022-1738 OESA-2022-1738 — libreswan security update 2026-10-03T15:38:43.132895+00:00

Affected: openEuler:22.03-LTS: libreswan

Libreswan is an implementation of IKEv1 and IKEv2 for IPsec. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks. Everything passing through the untrusted net is encrypted by the ipsec gateway machine and decrypted by the gateway at the other end of the tunnel. The resulting tunnel is a virtual private network or VPN. Security Fix(es): Libreswan 4.2 through 4.5 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted IKEv1 packet because pluto/ikev1.c wrongly expects that a state object exists. This is fixed in 4.6.(CVE-2022-23094)

 https://cve.radiocsirt.org/vuln/rhsa-2022:0199 RHSA-2022:0199 — Red Hat Security Advisory: libreswan security update 2026-10-03T15:38:43.132927+00:00

libreswan: Malicious IKEv1 packet can cause libreswan to restart

 https://cve.radiocsirt.org/vuln/rhsa-2022:0239 RHSA-2022:0239 — Red Hat Security Advisory: libreswan security update 2026-10-03T15:38:43.132944+00:00

libreswan: Malicious IKEv1 packet can cause libreswan to restart

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-23094 UBUNTU-CVE-2022-23094 2026-10-03T15:38:43.132959+00:00

Affected: Ubuntu:18.04:LTS: libreswan, Ubuntu:20.04:LTS: libreswan, Ubuntu:22.04:LTS: libreswan

Libreswan 4.2 through 4.5 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted IKEv1 packet because pluto/ikev1.c wrongly expects that a state object exists. This is fixed in 4.6.