https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 10:03:02 +0000 https://cve.radiocsirt.org/vuln/alsa-2024:1998 <p><strong>Affected:</strong> AlmaLinux:8: libreswan</p> <p>Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network (VPN).</p> <p>Security Fix(es):</p> <p>* libreswan: Missing PreSharedKey for connection can cause crash (CVE-2024-2357)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: libreswan</p> <p>Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network (VPN).</p> <p>Security Fix(es):</p> <p>* libreswan: Missing PreSharedKey for connection can cause crash (CVE-2024-2357)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2024:1998 https://cve.radiocsirt.org/vuln/bdu:2024-03242 bdu:2024-03242 https://cve.radiocsirt.org/vuln/bdu:2024-03242 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0646 certfr-2024-avi-0646 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0646 https://cve.radiocsirt.org/vuln/euvd-2026-217207 EUVD-2026-217207 https://cve.radiocsirt.org/vuln/euvd-2026-217207 https://cve.radiocsirt.org/vuln/fkie_cve-2024-2357 <p>The Libreswan Project was notified of an issue causing libreswan to restart under some IKEv2 retransmit scenarios when a connection is configured to use PreSharedKeys (authby=secret) and the connection cannot find a matching configured secret. When such a connection is automatically added on startup using the auto= keyword, it can cause repeated crashes leading to a Denial of Service.</p> <p>The Libreswan Project was notified of an issue causing libreswan to restart under some IKEv2 retransmit scenarios when a connection is configured to use PreSharedKeys (authby=secret) and the connection cannot find a matching configured secret. When such a connection is automatically added on startup using the auto= keyword, it can cause repeated crashes leading to a Denial of Service.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-2357 https://cve.radiocsirt.org/vuln/ghsa-77h7-8788-mfv3 <p>The Libreswan Project was notified of an issue causing libreswan to restart under some IKEv2 retransmit scenarios when a connection is configured to use PreSharedKeys (authby=secret) and the connection cannot find a matching configured secret. When such a connection is automatically added on startup using the auto= keyword, it can cause repeated crashes leading to a Denial of Service.</p> <p>The Libreswan Project was notified of an issue causing libreswan to restart under some IKEv2 retransmit scenarios when a connection is configured to use PreSharedKeys (authby=secret) and the connection cannot find a matching configured secret. When such a connection is automatically added on startup using the auto= keyword, it can cause repeated crashes leading to a Denial of Service.</p> https://cve.radiocsirt.org/vuln/ghsa-77h7-8788-mfv3 https://cve.radiocsirt.org/vuln/gsd-2024-2357 gsd-2024-2357 https://cve.radiocsirt.org/vuln/gsd-2024-2357 https://cve.radiocsirt.org/vuln/msrc_cve-2024-2357 msrc_CVE-2024-2357 https://cve.radiocsirt.org/vuln/msrc_cve-2024-2357 https://cve.radiocsirt.org/vuln/oesa-2024-1341 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: libreswan, openEuler:20.03-LTS-SP4: libreswan, openEuler:22.03-LTS: libreswan, openEuler:22.03-LTS-SP2: libreswan, openEuler:22.03-LTS-SP3: libreswan</p> <p>Libreswan is an implementation of IKEv1 and IKEv2 for IPsec. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks. Everything passing through the untrusted net is encrypted by the ipsec gateway machine and decrypted by the gateway at the other end of the tunnel. The resulting tunnel is a virtual private network or VPN. Security Fix(es): The Libreswan Project was notified of an issue causing libreswan to restart under some IKEv2 retransmit scenarios when a connection is configured to use PreSharedKeys (authby=secret) and the connection cannot find a matching configured secret. When such a connection is automatically added on startup using the auto= keyword, it can cause repeated crashes leading to a Denial of Service.(CVE-2024-2357)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: libreswan, openEuler:20.03-LTS-SP4: libreswan, openEuler:22.03-LTS: libreswan, openEuler:22.03-LTS-SP2: libreswan, openEuler:22.03-LTS-SP3: libreswan</p> <p>Libreswan is an implementation of IKEv1 and IKEv2 for IPsec. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks. Everything passing through the untrusted net is encrypted by the ipsec gateway machine and decrypted by the gateway at the other end of the tunnel. The resulting tunnel is a virtual private network or VPN. Security Fix(es): The Libreswan Project was notified of an issue causing libreswan to restart under some IKEv2 retransmit scenarios when a connection is configured to use PreSharedKeys (authby=secret) and the connection cannot find a matching configured secret. When such a connection is automatically added on startup using the auto= keyword, it can cause repeated crashes leading to a Denial of Service.(CVE-2024-2357)</p> https://cve.radiocsirt.org/vuln/oesa-2024-1341 https://cve.radiocsirt.org/vuln/rhba-2024:11505 <p>libreswan: Regression of CVE-2023-30570 fixes in the Red Hat Enterprise Linux libreswan: remote DoS via crafted TS payload with an incorrect selector length libreswan: Malicious IKEv1 Aggressive Mode packets can crash libreswan libreswan: Invalid IKEv2 REKEY proposal causes restart libreswan: Invalid IKEv1 Quick Mode ID causes restart libreswan: Invalid IKEv1 repeat IKE SA delete causes crash and restart libreswan: Missing PreSharedKey for connection can cause crash libreswan: IKEv1 default AH/ESP responder can crash and restart</p> <p>libreswan: Regression of CVE-2023-30570 fixes in the Red Hat Enterprise Linux libreswan: remote DoS via crafted TS payload with an incorrect selector length libreswan: Malicious IKEv1 Aggressive Mode packets can crash libreswan libreswan: Invalid IKEv2 REKEY proposal causes restart libreswan: Invalid IKEv1 Quick Mode ID causes restart libreswan: Invalid IKEv1 repeat IKE SA delete causes crash and restart libreswan: Missing PreSharedKey for connection can cause crash libreswan: IKEv1 default AH/ESP responder can crash and restart</p> https://cve.radiocsirt.org/vuln/rhba-2024:11505 https://cve.radiocsirt.org/vuln/rhsa-2024:1998 <p>libreswan: Missing PreSharedKey for connection can cause crash</p> <p>libreswan: Missing PreSharedKey for connection can cause crash</p> https://cve.radiocsirt.org/vuln/rhsa-2024:1998 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-2357 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: libreswan, Ubuntu:20.04:LTS: libreswan, Ubuntu:22.04:LTS: libreswan, Ubuntu:24.04:LTS: libreswan</p> <p>The Libreswan Project was notified of an issue causing libreswan to restart under some IKEv2 retransmit scenarios when a connection is configured to use PreSharedKeys (authby=secret) and the connection cannot find a matching configured secret. When such a connection is automatically added on startup using the auto= keyword, it can cause repeated crashes leading to a Denial of Service.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: libreswan, Ubuntu:20.04:LTS: libreswan, Ubuntu:22.04:LTS: libreswan, Ubuntu:24.04:LTS: libreswan</p> <p>The Libreswan Project was notified of an issue causing libreswan to restart under some IKEv2 retransmit scenarios when a connection is configured to use PreSharedKeys (authby=secret) and the connection cannot find a matching configured secret. When such a connection is automatically added on startup using the auto= keyword, it can cause repeated crashes leading to a Denial of Service.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-2357 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0950 <p>Ein lokaler Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux in Libreswan ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein lokaler Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux in Libreswan ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0950