Skip to contentThe Libreswan Project Libreswan vulnerabilities
- the libreswan project libreswanNull Pointer Dereference in PKCS#7 bundle with no certificatesCVE-2026-77207Fix available7.5 High
- the libreswan project libreswanIKEv2 pre-authentication Null Pointer Dereference in EAP codeCVE-2026-77206Fix available7.5 High
- the libreswan project libreswanDenial of Service via sending bogus X.509 certificatesCVE-2026-77205Fix available3.7 Low
- the libreswan project libreswanIKEv2 Use-After-Free bug when using IKE-over-TCPCVE-2026-94453Fix available7.5 High
- the libreswan project libreswanFIPS mode assertion failure via malicious CERT payloadCVE-2026-14957Fix available7.5 High
- libreswanIKEv1 Denial of Service via RSA-SHA1 (PKCS#1 Version 1.5 Encrypted) authentication payloadCVE-2026-50721Fix available7.5 High
- libreswanIKEv2 Denial of Service via RSA-SHA1 (PKCS#1 RSASSA-PKCS1-v1_5) authentication payloadCVE-2026-50722Fix available7.5 High
- libreswanIKEv2 Denial of Service via malformed fragmentationCVE-2026-12413Fix available7.5 High
- libreswanAn out-of-bounds buffer read flaw was found in the pluto daemon of libreswan from versions 3.27...CVE-2020-1763Fix available7.5 High
- libreswan, fedoraproject fedora, redhat enterprise linux +2 more +4 moreThe Libreswan Project has found a vulnerability in the processing of IKEv1 informational exchange...CVE-2019-10155Fix available3.1 Low