Most recent entries from all

ALSA-2024:4050 — Moderate: libreswan security update

Affected: AlmaLinux:9: libreswan

Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network (VPN).

Security Fix(es):

* libreswan: IKEv1 default AH/ESP responder can crash and restart (CVE-2024-3652)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2024-04885

certfr-2024-avi-0646 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan…

certfr-2024-avi-0646

EUVD-2026-273650

fkie_cve-2024-3652

The Libreswan Project was notified of an issue causing libreswan to restart when using IKEv1 without specifying an esp= line. When the peer requests AES-GMAC, libreswan's default proposal handler causes an assertion failure and crashes and restarts. IKEv2 connections are not affected.

GHSA-395v-96gv-76w3

gsd-2024-3652

msrc_CVE-2024-3652 — IKEv1 default AH/ESP responder can cause libreswan to abort and restart

msrc_CVE-2024-3652

OESA-2024-1565 — libreswan security update

Affected: openEuler:20.03-LTS-SP1: libreswan, openEuler:20.03-LTS-SP4: libreswan, openEuler:22.03-LTS: libreswan, openEuler:22.03-LTS-SP1: libreswan, openEuler:22.03-LTS-SP2: libreswan, openEuler:22.03-LTS-SP3: libreswan

Libreswan is an implementation of IKEv1 and IKEv2 for IPsec. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks. Everything passing through the untrusted net is encrypted by the ipsec gateway machine and decrypted by the gateway at the other end of the tunnel. The resulting tunnel is a virtual private network or VPN. Security Fix(es): The Libreswan Project was notified of an issue causing libreswan to restart when using IKEv1 without specifying an esp= line. When the peer requests AES-GMAC, libreswan's default proposal handler causes an assertion failure and crashes and restarts. IKEv2 connections are not affected.(CVE-2024-3652)

RHBA-2024:11505 — Red Hat Bug Fix Advisory: OpenShift Container Platform 4.16.28 packages and security update

libreswan: Regression of CVE-2023-30570 fixes in the Red Hat Enterprise Linux libreswan: remote DoS via crafted TS payload with an incorrect selector length libreswan: Malicious IKEv1 Aggressive Mode packets can crash libreswan libreswan: Invalid IKEv2 REKEY proposal causes restart libreswan: Invalid IKEv1 Quick Mode ID causes restart libreswan: Invalid IKEv1 repeat IKE SA delete causes crash and restart libreswan: Missing PreSharedKey for connection can cause crash libreswan: IKEv1 default AH/ESP responder can crash and restart

RHSA-2024:4050 — Red Hat Security Advisory: libreswan security update

libreswan: IKEv1 default AH/ESP responder can crash and restart

UBUNTU-CVE-2024-3652

Affected: Ubuntu:18.04:LTS: libreswan, Ubuntu:20.04:LTS: libreswan, Ubuntu:22.04:LTS: libreswan, Ubuntu:24.04:LTS: libreswan, Ubuntu:25.10: libreswan, Ubuntu:26.04:LTS: libreswan

WID-SEC-W-2024-1434 — Red Hat Enterprise Linux (pki and Libreswan): Mehrere Schwachstellen

Ein entfernter Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um Sicherheitsmaßnahmen zu umgehen oder einen Denial-of-Service-Zustand zu verursachen.