libreswan vulnerabilities (Red Hat)
19 vulnerabilities.
-
libreswanRed Hat FIPS mode assertion failure via malicious CERT payload 7.5 High -
libreswanRed Hat IKEv1 Denial of Service via RSA-SHA1 (PKCS#1 Version 1.5 Encrypted) authentication payload 7.5 High -
libreswanRed Hat IKEv2 Denial of Service via RSA-SHA1 (PKCS#1 RSASSA-PKCS1-v1_5) authentication payload 7.5 High -
libreswanRed Hat IKEv2 Denial of Service via malformed fragmentation 7.5 High -
libreswanRed Hat IKEv1 default AH/ESP responder can cause libreswan to abort and restart 6.5 Medium -
libreswanRed Hat IKEv2 misconfiguration can cause libreswan to abort and restart 6.5 Medium -
libreswanRed Hat An issue was discovered in Libreswan 3.x and 4.x before 4.12. When an IKEv1 ISAKMP SA... 6.5 Medium -
libreswanRed Hat An issue was discovered in Libreswan before 4.12. When an IKEv1 Quick Mode connection configured... 6.5 Medium -
libreswanRed Hat An issue was discovered in Libreswan before 4.12. When an IKEv2 Child SA REKEY packet contains an... 6.5 Medium -
libreswanRed Hat A vulnerability was found in the libreswan library. This security issue occurs when an IKEv1... 7.5 High -
libreswanRed Hat pluto in Libreswan before 4.11 allows a denial of service (responder SPI mishandling and daemon... 7.5 High -
libreswanRed Hat Libreswan 4.9 allows remote attackers to cause a denial of service (assert failure and daemon... 6.5 Medium -
libreswanRed Hat Libreswan 4.2 through 4.5 allows remote attackers to cause a denial of service (NULL pointer... 7.5 High -
libreswanRed Hat An out-of-bounds buffer read flaw was found in the pluto daemon of libreswan from versions 3.27... 7.5 High -
libreswanRed Hat The Libreswan Project has found a vulnerability in the processing of IKEv1 informational exchange... 3.1 Low -
libreswanRed Hat In Libreswan before 3.28, an assertion failure can lead to a pluto IKE daemon restart. An... 7.5 High -
libreswanRed Hat programs/pluto/ikev1.c in libreswan before 3.17 retransmits in initial-responder states, which... 7.5 High -
libreswanRed Hat The pluto IKE daemon in libreswan before 3.15 and Openswan before 2.6.45, when built with NSS,... 4.3 Medium -
libreswanRed Hat libreswan 3.9 through 3.12 allows remote attackers to cause a denial of service (daemon restart)... 5.0 Medium