Red Hat Security AdvisoryRHSA-2024:10594
libreswan security update
Released 2024-12-02 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream E4S (v.9.0) libreswan-4.6-3.el9_0.3
Fixes 6 records
Priority MEDIUM 62
Libreswan 4.9 allows remote attackers to cause a denial of service (assert failure and daemon restart) via crafted TS payload with an incorrect selector length.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01606 · Published 2023-02-21 · Fixed CWE-400
Priority MEDIUM 42
A vulnerability was found in the libreswan library.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01581 · Published 2023-05-17 · Fixed CWE-400
Priority LOW 31
The Libreswan Project was notified of an issue causing libreswan to restart under some IKEv2 retransmit scenarios when a connection is configured to use PreSharedKeys (authby=secret) and the connection cannot find a matc…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00952 · Published 2024-03-11 · Partial fix · 3.0, 5.0
Priority LOW 30
An issue was discovered in Libreswan 3.x and 4.x before 4.12.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00813 · Published 2023-08-25 · Partial fix CWE-476
Priority LOW 30
An issue was discovered in Libreswan before 4.12.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00813 · Published 2023-08-25 · Fixed CWE-476
Priority LOW 30
An issue was discovered in Libreswan before 4.12.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00813 · Published 2023-08-25 · Partial fix
THREATIST.IORead the docs