Skip to contentThe Libreswan Project (www.libreswan.org) Libreswan vulnerabilities
- the libreswan project libreswanNull Pointer Dereference in PKCS#7 bundle with no certificatesCVE-2026-77207Fix available7.5 High
- the libreswan project libreswanIKEv2 pre-authentication Null Pointer Dereference in EAP codeCVE-2026-77206Fix available7.5 High
- the libreswan project libreswanDenial of Service via sending bogus X.509 certificatesCVE-2026-77205Fix available3.7 Low
- the libreswan project libreswanIKEv2 Use-After-Free bug when using IKE-over-TCPCVE-2026-94453Fix available7.5 High
- the libreswan project libreswanFIPS mode assertion failure via malicious CERT payloadCVE-2026-14957Fix available7.5 High
- libreswanIKEv1 Denial of Service via RSA-SHA1 (PKCS#1 Version 1.5 Encrypted) authentication payloadCVE-2026-50721Fix available7.5 High
- libreswanIKEv2 Denial of Service via RSA-SHA1 (PKCS#1 RSASSA-PKCS1-v1_5) authentication payloadCVE-2026-50722Fix available7.5 High
- libreswanIKEv2 Denial of Service via malformed fragmentationCVE-2026-12413Public exploitFix available7.5 High
- libreswanIKEv1 default AH/ESP responder can cause libreswan to abort and restartCVE-2024-3652Fix available6.5 Medium
- the libreswan project (www.libreswan.org) libreswanIKEv2 misconfiguration can cause libreswan to abort and restartCVE-2024-2357Fix available6.5 Medium
- libreswan, redhat enterprise linux, enterprise linux eus +2 more +4 moreA vulnerability was found in the libreswan library. This security issue occurs when an IKEv1...CVE-2023-2295Fix available7.5 High
- libreswanAn out-of-bounds buffer read flaw was found in the pluto daemon of libreswan from versions 3.27...CVE-2020-1763Fix available7.5 High
- libreswan, fedoraproject fedora, redhat enterprise linux +2 more +4 moreThe Libreswan Project has found a vulnerability in the processing of IKEv1 informational exchange...CVE-2019-10155Fix available3.1 Low