The Libreswan Project was notified of an issue causing libreswan to restart when using IKEv1 without specifying an esp= line. When the peer requests AES-GMAC, libreswan's default proposal handler causes an assertion failure and crashes and restarts. IKEv2 connections are not affected.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-libreswan | Jun 26, 2024 | Apr 11, 2024 | |
| Alpine Linux | alpine-linux-upgrade-libreswan | Aug 22, 2024 | Apr 11, 2024 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-libreswanamazon-linux-ami-2-upgrade-libreswan-debuginfo | Jul 23, 2024 | Apr 11, 2024 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-libreswanamazon-linux-2023-upgrade-libreswan-debuginfoamazon-linux-2023-upgrade-libreswan-debugsource | Feb 17, 2025 | Apr 15, 2024 | |
| Debian | no-fix-debian-deb-package | May 15, 2025 | Apr 11, 2024 | |
| Oracle_linux | — | oracle-linux-upgrade-libreswan | Jun 24, 2024 | Apr 15, 2024 |
| Redhat Openshift | linuxrpm-upgrade-libreswan | Jan 10, 2025 | Apr 11, 2024 | |
| Redhat_linux | redhat-upgrade-libreswanredhat-upgrade-libreswan-debuginforedhat-upgrade-libreswan-debugsource | Jun 26, 2024 | Apr 11, 2024 | |
| Rocky_linux | rocky-upgrade-libreswanrocky-upgrade-libreswan-debuginforocky-upgrade-libreswan-debugsource | Jul 3, 2024 | Apr 11, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub