https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T11:56:18.548941+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2023:2122 ALSA-2023:2122 — Important: libreswan security update 2026-10-03T11:56:18.567886+00:00

Affected: AlmaLinux:8: libreswan

Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network (VPN).

Security Fix(es):

* libreswan: Malicious IKEv1 Aggressive Mode packets can crash libreswan (CVE-2023-30570)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/euvd-2026-210487 EUVD-2026-210487 2026-10-03T11:56:18.567948+00:00 EUVD-2026-210487 https://cve.radiocsirt.org/vuln/fkie_cve-2023-30570 fkie_cve-2023-30570 2026-10-03T11:56:18.567964+00:00

pluto in Libreswan before 4.11 allows a denial of service (responder SPI mishandling and daemon crash) via unauthenticated IKEv1 Aggressive Mode packets. The earliest affected version is 3.28.

 https://cve.radiocsirt.org/vuln/ghsa-4h3c-85v5-c6x6 GHSA-4h3c-85v5-c6x6 2026-10-03T11:56:18.567986+00:00

pluto in Libreswan before 4.11 allows a denial of service (responder SPI mishandling and daemon crash) via unauthenticated IKEv1 Aggressive Mode packets. The earliest affected version is 3.28.

 https://cve.radiocsirt.org/vuln/gsd-2023-30570 gsd-2023-30570 2026-10-03T11:56:18.568000+00:00 gsd-2023-30570 https://cve.radiocsirt.org/vuln/msrc_cve-2023-30570 msrc_CVE-2023-30570 — pluto in Libreswan before 4.11 allows a denial of service (responder SPI mishandling and daemon crash) via unauthentica… 2026-10-03T11:56:18.568011+00:00 msrc_CVE-2023-30570 https://cve.radiocsirt.org/vuln/oesa-2023-1318 OESA-2023-1318 — libreswan security update 2026-10-03T11:56:18.568027+00:00

Affected: openEuler:20.03-LTS-SP1: libreswan, openEuler:20.03-LTS-SP3: libreswan, openEuler:22.03-LTS: libreswan, openEuler:22.03-LTS-SP1: libreswan

Libreswan is an implementation of IKEv1 and IKEv2 for IPsec. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks. Everything passing through the untrusted net is encrypted by the ipsec gateway machine and decrypted by the gateway at the other end of the tunnel. The resulting tunnel is a virtual private network or VPN. This package contains the daemons and userland tools for setting up Libreswan. Libreswan also supports IKEv2 (RFC7296) and Secure Labeling Libreswan is based on Openswan-2.6.38 which in turn is based on FreeS/WAN-2.04 Security Fix(es): pluto in Libreswan before 4.11 allows a denial of service (responder SPI mishandling and daemon crash) via unauthenticated IKEv1 Aggressive Mode packets. The earliest affected version is 3.28.(CVE-2023-30570)

 https://cve.radiocsirt.org/vuln/rhba-2024:11505 RHBA-2024:11505 — Red Hat Bug Fix Advisory: OpenShift Container Platform 4.16.28 packages and security update 2026-10-03T11:56:18.568055+00:00

libreswan: Regression of CVE-2023-30570 fixes in the Red Hat Enterprise Linux libreswan: remote DoS via crafted TS payload with an incorrect selector length libreswan: Malicious IKEv1 Aggressive Mode packets can crash libreswan libreswan: Invalid IKEv2 REKEY proposal causes restart libreswan: Invalid IKEv1 Quick Mode ID causes restart libreswan: Invalid IKEv1 repeat IKE SA delete causes crash and restart libreswan: Missing PreSharedKey for connection can cause crash libreswan: IKEv1 default AH/ESP responder can crash and restart

 https://cve.radiocsirt.org/vuln/rhsa-2023:2122 RHSA-2023:2122 — Red Hat Security Advisory: libreswan security update 2026-10-03T11:56:18.568079+00:00

libreswan: Malicious IKEv1 Aggressive Mode packets can crash libreswan

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-30570 UBUNTU-CVE-2023-30570 2026-10-03T11:56:18.568094+00:00

Affected: Ubuntu:18.04:LTS: libreswan, Ubuntu:20.04:LTS: libreswan, Ubuntu:22.04:LTS: libreswan, Ubuntu:24.04:LTS: libreswan, Ubuntu:25.10: libreswan, Ubuntu:26.04:LTS: libreswan

pluto in Libreswan before 4.11 allows a denial of service (responder SPI mishandling and daemon crash) via unauthenticated IKEv1 Aggressive Mode packets. The earliest affected version is 3.28.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1149 WID-SEC-W-2023-1149 — libreswan: Schwachstelle ermöglicht Denial of Service 2026-10-03T11:56:18.568117+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux und Fedora Linux bezüglich "libreswan" ausnutzen, um einen Denial of Service Angriff durchzuführen.