The Libreswan Project has found a vulnerability in the processing of IKEv1 informational exchange packets which are encrypted and integrity protected using the established IKE SA encryption and integrity keys, but as a receiver, the integrity check value was not verified. This issue affects versions before 3.29.
CVSS Details
- CVSS 3.1 Base Score: 3.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libreswan | Aug 22, 2024 | Jun 12, 2019 |
| Centos_linux | — | Upgrade libreswanUpgrade libreswan-debuginfoUpgrade libreswan-debugsource | Nov 6, 2019 | Jun 12, 2019 |
| Debian | — | Upgrade strongswanUpgrade libreswan | Jul 30, 2024 | Jun 12, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libreswan | May 25, 2022 | Jun 12, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libreswan | Apr 26, 2022 | Jun 12, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libreswan | Nov 3, 2020 | Jun 12, 2019 |
| Oracle_linux | — | Upgrade libreswan | Oct 5, 2022 | Jun 10, 2019 |
| Redhat_linux | — | Upgrade libreswan-debugsourceUpgrade libreswan-debuginfoNo solution existsUpgrade libreswan | Nov 6, 2019 | Jun 12, 2019 |
| Ubuntu | — | Upgrade libreswan | Nov 19, 2024 | Jun 12, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub