Libreswan vulnerabilities

Products

• Libreswan 24

Newest

• libreswan IKEv1 Denial of Service via RSA-SHA1 (PKCS#1 Version 1.5 Encrypted) authentication payload CVE-2026-50721 Fix available 7.5 HighJuly 2, 2026
• libreswan IKEv2 Denial of Service via RSA-SHA1 (PKCS#1 RSASSA-PKCS1-v1_5) authentication payload CVE-2026-50722 Fix available 7.5 HighJuly 2, 2026
• libreswan IKEv2 Denial of Service via malformed fragmentation CVE-2026-12413 Fix available 7.5 HighJuly 2, 2026
• libreswan IKEv1 default AH/ESP responder can cause libreswan to abort and restart CVE-2024-3652 Fix available 6.5 MediumApril 11, 2024
• libreswan An issue was discovered in Libreswan 3.x and 4.x before 4.12. When an IKEv1 ISAKMP SA... CVE-2023-38712 Fix available 6.5 MediumAugust 25, 2023
• libreswan An issue was discovered in Libreswan before 4.12. When an IKEv1 Quick Mode connection configured... CVE-2023-38711 Fix available 6.5 MediumAugust 25, 2023
• libreswan An issue was discovered in Libreswan before 4.12. When an IKEv2 Child SA REKEY packet contains an... CVE-2023-38710 Fix available 6.5 MediumAugust 25, 2023
• libreswan, redhat enterprise linux, enterprise linux eus +2 more +4 more A vulnerability was found in the libreswan library. This security issue occurs when an IKEv1... CVE-2023-2295 Fix available 7.5 HighMay 16, 2023
• libreswan pluto in Libreswan before 4.11 allows a denial of service (responder SPI mishandling and daemon... CVE-2023-30570 Fix available 7.5 HighMay 4, 2023
• libreswan, debian linux +1 more Libreswan 4.9 allows remote attackers to cause a denial of service (assert failure and daemon... CVE-2023-23009 Fix available 6.5 MediumFebruary 21, 2023
• libreswan, debian linux, fedoraproject fedora +2 more Libreswan 4.2 through 4.5 allows remote attackers to cause a denial of service (NULL pointer... CVE-2022-23094 Fix available 7.5 HighJanuary 15, 2022
• libreswan An out-of-bounds buffer read flaw was found in the pluto daemon of libreswan from versions 3.27... CVE-2020-1763 Fix available 7.5 HighMay 12, 2020
• libreswan, fedoraproject fedora, redhat enterprise linux +2 more +4 more The Libreswan Project has found a vulnerability in the processing of IKEv1 informational exchange... CVE-2019-10155 Fix available 3.1 LowJune 12, 2019
• libreswan In Libreswan before 3.28, an assertion failure can lead to a pluto IKE daemon restart. An... CVE-2019-12312 Fix available 7.5 HighMay 24, 2019
• libreswan, fedoraproject fedora +1 more libreswan before 3.18 allows remote attackers to cause a denial of service (NULL pointer... CVE-2016-5391 7.5 HighJune 13, 2017
• libreswan programs/pluto/ikev1.c in libreswan before 3.17 retransmits in initial-responder states, which... CVE-2016-5361 Fix available 7.5 HighJune 16, 2016
• libreswan, fedoraproject fedora +1 more Libreswan 3.16 might allow remote attackers to cause a denial of service (daemon restart) via an... CVE-2016-3071 7.5 HighApril 18, 2016
• libreswan The pluto IKE daemon in libreswan before 3.15 and Openswan before 2.6.45, when built with NSS,... CVE-2015-3240 Fix available 4.3 MediumNovember 9, 2015
• libreswan libreswan 3.9 through 3.12 allows remote attackers to cause a denial of service (daemon restart)... CVE-2015-3204 Fix available 5.0 MediumJuly 1, 2015
• libreswan Libreswan 3.7 and earlier allows remote attackers to cause a denial of service (NULL pointer... CVE-2013-6467 5.0 MediumJanuary 26, 2014
• libreswan The ikev2parent_inI1outR1 function in pluto/ikev2_parent.c in libreswan before 3.7 allows remote... CVE-2013-7294 5.0 MediumJanuary 16, 2014
• libreswan Race condition in the libreswan.spec files for Red Hat Enterprise Linux (RHEL) and Fedora... CVE-2013-7283 9.3 HighJanuary 9, 2014
• libreswan Libreswan 3.6 allows remote attackers to cause a denial of service (crash) via a small length... CVE-2013-4564 5.0 MediumJanuary 7, 2014
• libreswan Buffer overflow in the atodn function in libreswan 3.0 and 3.1, when Opportunistic Encryption is... CVE-2013-2052 5.1 MediumJuly 9, 2013