https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 21:38:42 +0000 https://cve.radiocsirt.org/vuln/certfr-2022-avi-267 certfr-2022-avi-267 https://cve.radiocsirt.org/vuln/certfr-2022-avi-267 https://cve.radiocsirt.org/vuln/cnvd-2019-15894 cnvd-2019-15894 https://cve.radiocsirt.org/vuln/cnvd-2019-15894 https://cve.radiocsirt.org/vuln/euvd-2026-55023 EUVD-2026-55023 https://cve.radiocsirt.org/vuln/euvd-2026-55023 https://cve.radiocsirt.org/vuln/fkie_cve-2019-12312 <p>In Libreswan 3.27 an assertion failure can lead to a pluto IKE daemon restart. An attacker can trigger a NULL pointer dereference by initiating an IKEv2 IKE_SA_INIT exchange, followed by a bogus INFORMATIONAL exchange instead of the normallly expected IKE_AUTH exchange. This affects send_v2N_spi_response_from_state() in programs/pluto/ikev2_send.c that will then trigger a NULL pointer dereference leading to a restart of libreswan.</p> <p>In Libreswan 3.27 an assertion failure can lead to a pluto IKE daemon restart. An attacker can trigger a NULL pointer dereference by initiating an IKEv2 IKE_SA_INIT exchange, followed by a bogus INFORMATIONAL exchange instead of the normallly expected IKE_AUTH exchange. This affects send_v2N_spi_response_from_state() in programs/pluto/ikev2_send.c that will then trigger a NULL pointer dereference leading to a restart of libreswan.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-12312 https://cve.radiocsirt.org/vuln/ghsa-mg44-55g8-hfpm <p>In Libreswan before 3.28, an assertion failure can lead to a pluto IKE daemon restart. An attacker can trigger a NULL pointer dereference by sending two IKEv2 packets (init_IKE and delete_IKE) in 3des_cbc mode to a Libreswan server. This affects send_v2N_spi_response_from_state in programs/pluto/ikev2_send.c when built with Network Security Services (NSS).</p> <p>In Libreswan before 3.28, an assertion failure can lead to a pluto IKE daemon restart. An attacker can trigger a NULL pointer dereference by sending two IKEv2 packets (init_IKE and delete_IKE) in 3des_cbc mode to a Libreswan server. This affects send_v2N_spi_response_from_state in programs/pluto/ikev2_send.c when built with Network Security Services (NSS).</p> https://cve.radiocsirt.org/vuln/ghsa-mg44-55g8-hfpm https://cve.radiocsirt.org/vuln/gsd-2019-12312 gsd-2019-12312 https://cve.radiocsirt.org/vuln/gsd-2019-12312 https://cve.radiocsirt.org/vuln/rhsa-2019:3391 <p>libreswan: vulnerability in the processing of IKEv1 informational packets due to missing integrity check libreswan: null-pointer dereference by sending two IKEv2 packets</p> <p>libreswan: vulnerability in the processing of IKEv1 informational packets due to missing integrity check libreswan: null-pointer dereference by sending two IKEv2 packets</p> https://cve.radiocsirt.org/vuln/rhsa-2019:3391