IKEv2 misconfiguration can cause libreswan to abort and restart
Priority LOW 31Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- Partial Red Hat: 9 fixed, 2 without a fix
Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and Red Hat.
Summary
The Libreswan Project was notified of an issue causing libreswan to restart under some IKEv2 retransmit scenarios when a connection is configured to use PreSharedKeys (authby=secret) and the connection cannot find a matching configured secret. When such a connection is automatically added on startup using the auto= keyword, it can cause repeated crashes leading to a Denial of Service.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00952 61st percentileScored 2026-11-07
Fix Partial libreswan (The Libreswan Project (www.libreswan.org)): 3.0, 5.0Red Hat: 7 advisoriesRed Hat: 9 fixed, 2 without a fix
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| The Libreswan Project (www.libreswan.org) | libreswan | 4.2 – 4.12 | 3.0, 5.0 | Patch available | CNA |
- libreswan VendorThe Libreswan Project (www.libreswan.org) Affected 4.2 – 4.12 Fixed in 3.0, 5.0 Patch available CNA
Remediation
- Fix · CNA libreswan (The Libreswan Project (www.libreswan.org)) Fixed in 3.0, 5.0
Red Hat 7 advisories
- RHSA-2024:10594 Released 2024-12-02 · Red Hat rating Moderatelibreswan security update
- Red Hat Enterprise Linux AppStream E4S (v.9.0) libreswan-4.6-3.el9_0.3
- RHSA-2024:2085 Released 2024-04-30 · Red Hat rating Moderatelibreswan security and bug fix update
- Red Hat Enterprise Linux AppStream EUS (v.9.2) libreswan-4.9-5.el9_2.1
- RHSA-2024:2082 Released 2024-04-30 · Red Hat rating Moderatelibreswan security update
- Red Hat Enterprise Linux AppStream EUS (v.8.6) libreswan-4.5-1.el8_6.2
Show 4 more Red Hat advisories
- RHSA-2024:2081 Released 2024-04-30 · Red Hat rating Moderatelibreswan security update
- Red Hat Enterprise Linux AppStream EUS (v.8.8) libreswan-4.9-3.el8_8.1
- RHSA-2024:2565 Released 2024-04-30 · Red Hat rating Moderatelibreswan security update
- Red Hat Enterprise Linux AppStream (v. 9) libreswan-4.12-2.el9_4
- RHSA-2024:2033 Released 2024-04-24 · Red Hat rating Moderatelibreswan security and bug fix update
- Red Hat Enterprise Linux AppStream (v. 9) libreswan-4.12-1.el9_3.1
- RHSA-2024:1998 Released 2024-04-23 · Red Hat rating Moderatelibreswan security update
- Red Hat Enterprise Linux AppStream (v. 8) libreswan-4.12-2.el8_9.2
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux 6 | Affected | No fix planned: Out of support scope |
| Red Hat Enterprise Linux 7 | Affected | No fix planned: Out of support scope |
| Red Hat Enterprise Linux AppStream (v. 8) | Fixed | RHSA-2024:1998 |
| Red Hat Enterprise Linux AppStream (v. 9) | Fixed | RHSA-2024:2033, RHSA-2024:2565 |
| Red Hat Enterprise Linux AppStream E4S (v.9.0) | Fixed | RHSA-2024:10594 |
| Red Hat Enterprise Linux AppStream EUS (v.8.6) | Fixed | RHSA-2024:2082 |
| Red Hat Enterprise Linux AppStream EUS (v.8.8) | Fixed | RHSA-2024:2081 |
| Red Hat Enterprise Linux AppStream EUS (v.9.2) | Fixed | RHSA-2024:2085 |
| Red Hat OpenShift Container Platform 4.15 | Fixed | — |
| Red Hat OpenShift Container Platform 4.16 | Fixed | — |
| Red Hat OpenShift Container Platform 4.17 | Fixed | — |
Not affected: 1 product
- Red Hat OpenShift Container Platform 4.17
Timeline
- 2026-10-02 Threatist record created from CVE-2024-2357
- 2026-10-03 Alias added: GHSA-77h7-8788-mfv3
References
Advisory 1
Other 3
- https://lists.fedoraproject.org/archives/list/[email protected]/message/EJZJYFHKBIJ4ZK5GAWWFFR3AKJS6O5JX/
- https://lists.fedoraproject.org/archives/list/[email protected]/message/HEM46ALKF7NG6CAUKZ7KQERVOHWQIQKY/
- https://lists.fedoraproject.org/archives/list/[email protected]/message/TVQ7MZY6LFFGRWAJNTKKN2VSEFS2VPAR/
Sources
- CVE-2024-2357 · CVE Program
- CVE-2024-2357 · NVD
- FIRST EPSS
- GHSA-77h7-8788-mfv3 · GitHub Advisory Database · CC BY 4.0
- CVE-2024-2357 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences