IKEv1 default AH/ESP responder can cause libreswan to abort and restart
Priority LOW 30CWE-404Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- Partial Red Hat: 11 fixed, 2 without a fix
Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and Red Hat. Impact type from CWE-404.
Summary
The Libreswan Project was notified of an issue causing libreswan to restart when using IKEv1 without specifying an esp= line. When the peer requests AES-GMAC, libreswan's default proposal handler causes an assertion failure and crashes and restarts. IKEv2 connections are not affected.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.008 56th percentileScored 2026-11-07
Fix Partial libreswan (The Libreswan Project (www.libreswan.org)): 5.0Red Hat: 6 advisoriesRed Hat: 11 fixed, 2 without a fix
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| The Libreswan Project (www.libreswan.org) | libreswan | 3.22 – 4.14 | 5.0 | Patch available | CNA |
- libreswan VendorThe Libreswan Project (www.libreswan.org) Affected 3.22 – 4.14 Fixed in 5.0 Patch available CNA
CPE configurations NVD · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:libreswan:libreswan:*:*:*:*:*:*:*:* | 3.22 to before 4.15 | Vulnerable | The Libreswan Project |
- cpe:2.3:a:libreswan:libreswan:*:*:*:*:*:*:*:* Versions 3.22 to before 4.15 Vulnerable ·The Libreswan Project
Remediation
- Fix · CNA libreswan (The Libreswan Project (www.libreswan.org)) Fixed in 5.0
Red Hat 6 advisories
- RHSA-2024:4431 Released 2024-07-09 · Red Hat rating Moderatelibreswan security update
- Red Hat Enterprise Linux AppStream EUS (v.9.2) libreswan-4.9-5.el9_2.2
- RHSA-2024:4417 Released 2024-07-09 · Red Hat rating Moderatelibreswan security update
- Red Hat Enterprise Linux AppStream AUS (v.8.6) libreswan-4.5-1.el8_6.3
- Red Hat Enterprise Linux AppStream E4S (v.8.6) libreswan-4.5-1.el8_6.3
- Red Hat Enterprise Linux AppStream TUS (v.8.6) libreswan-4.5-1.el8_6.3
- RHSA-2024:4376 Released 2024-07-08 · Red Hat rating Moderatelibreswan security update
- Red Hat Enterprise Linux AppStream (v. 8) libreswan-4.12-2.el8_10.4
Show 3 more Red Hat advisories
- RHSA-2024:4377 Released 2024-07-08 · Red Hat rating Moderatelibreswan security update
- Red Hat Enterprise Linux AppStream E4S (v.9.0) libreswan-4.6-3.el9_0.2
- RHSA-2024:4200 Released 2024-07-01 · Red Hat rating Moderatelibreswan security update
- Red Hat Enterprise Linux AppStream EUS (v.8.8) libreswan-4.9-3.el8_8.2
- RHSA-2024:4050 Released 2024-06-23 · Red Hat rating Moderatelibreswan security update
- Red Hat Enterprise Linux AppStream (v. 9) libreswan-4.12-2.el9_4.1
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux 10 | Affected | No fix yet |
| Red Hat Enterprise Linux 7 | Affected | No fix planned: Out of support scope |
| Red Hat Enterprise Linux AppStream (v. 8) | Fixed | RHSA-2024:4376 |
| Red Hat Enterprise Linux AppStream (v. 9) | Fixed | RHSA-2024:4050 |
| Red Hat Enterprise Linux AppStream AUS (v.8.6) | Fixed | RHSA-2024:4417 |
| Red Hat Enterprise Linux AppStream E4S (v.8.6) | Fixed | RHSA-2024:4417 |
| Red Hat Enterprise Linux AppStream E4S (v.9.0) | Fixed | RHSA-2024:4377 |
| Red Hat Enterprise Linux AppStream EUS (v.8.8) | Fixed | RHSA-2024:4200 |
| Red Hat Enterprise Linux AppStream EUS (v.9.2) | Fixed | RHSA-2024:4431 |
| Red Hat Enterprise Linux AppStream TUS (v.8.6) | Fixed | RHSA-2024:4417 |
| Red Hat OpenShift Container Platform 4.15 | Fixed | — |
| Red Hat OpenShift Container Platform 4.16 | Fixed | — |
| Red Hat OpenShift Container Platform 4.17 | Fixed | — |
Not affected: 3 products
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux AppStream E4S (v.8.6)
- Red Hat OpenShift Container Platform 4.17
Timeline
- 2026-10-02 Threatist record created from CVE-2024-3652
- 2026-10-03 Alias added: GHSA-395v-96gv-76w3
- 2026-11-05 Affected versions changed · Red Hat
References
Advisory 1
More The Libreswan Project (www.libreswan.org) vulnerabilities
- TI-2024-02192 IKEv2 misconfiguration can cause libreswan to abort and restart CVSS 3.1MEDIUM 6.5
Sources
- CVE-2024-3652 · CVE Program
- CVE-2024-3652 · NVD
- FIRST EPSS
- GHSA-395v-96gv-76w3 · GitHub Advisory Database · CC BY 4.0
- CVE-2024-3652 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences