LI
Product
Libreswan
24
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 9Medium 7Low 1
Watch
Add Libreswan to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-12413 | 7.5 | Jul 2 | IKEv2 Denial of Service via malformed fragmentation Affected: 4.6 before 5.3.1 |
| CVE-2023-30570 | 7.5 | May 29 | pluto in Libreswan before 4.11 allows a denial of service (responder SPI mishandling and daemon crash) via unauthenticated IKEv1 Aggressive Mode packets Affected: 3.28 through 4.10 |
| CVE-2023-2295 | 7.5 | May 17 | A vulnerability was found in the libreswan library Affected: 4.9-1.el8; 4.9-1.el9 |
| CVE-2022-23094 | 7.5 | Jan 15 | Libreswan 4.2 through 4.5 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted IKEv1 packet because pluto/ikev1.c wrongly… Affected: 4.2 before 4.6 |
| CVE-2020-1763 | 7.5 | May 12 | An out-of-bounds buffer read flaw was found in the pluto daemon of libreswan from versions 3.27 till 3.31 where, an unauthenticated attacker could use this flaw to crash libreswan… Affected: 3.27 through 3.31; 3.5 |
| CVE-2019-12312 | 7.5 | May 24 | In Libreswan 3.27 an assertion failure can lead to a pluto IKE daemon restart Affected: before 3.28 |
| CVE-2016-5391 | 7.5 | Jun 13 | libreswan before 3.18 allows remote attackers to cause a denial of service (NULL pointer dereference and pluto daemon restart) Affected: through 3.17 |
| CVE-2016-5361 | 7.5 | Jun 16 | programs/pluto/ikev1.c in libreswan before 3.17 retransmits in initial-responder states, which allows remote attackers to cause a denial of service (traffic amplification) via a… Affected: through 3.16 |
| CVE-2016-3071 | 7.5 | Apr 18 | Libreswan 3.16 might allow remote attackers to cause a denial of service (daemon restart) via an IKEv2 aes_xcbc transform Affected: 3.16 |
| CVE-2024-3652 | 6.5 | Apr 11 | The Libreswan Project was notified of an issue causing libreswan to restart when using IKEv1 without specifying an esp= line Affected: 3.22 before 4.15 |
| CVE-2023-38712 | 6.5 | Aug 25 | An issue was discovered in Libreswan 3.x and 4.x before 4.12 Affected: 3.0 before 4.0; 4.0 before 4.12 |
| CVE-2023-38711 | 6.5 | Aug 25 | An issue was discovered in Libreswan before 4.12 Affected: 4.6 before 4.12 |
| CVE-2023-38710 | 6.5 | Aug 25 | An issue was discovered in Libreswan before 4.12 Affected: 3.20 before 4.12 |
| CVE-2023-23009 | 6.5 | Feb 21 | Libreswan 4.9 allows remote attackers to cause a denial of service (assert failure and daemon restart) via crafted TS payload with an incorrect selector length Affected: 4.9 |
| CVE-2026-50721 | 5.9 | Jul 2 | IKEv1 Denial of Service via RSA-SHA1 (PKCS#1 Version 1.5 Encrypted) authentication payload Affected: before 5.3.1 |
| CVE-2026-50722 | 5.9 | Jul 2 | IKEv2 Denial of Service via RSA-SHA1 (PKCS#1 RSASSA-PKCS1-v1_5) authentication payload Affected: before 5.3.1 |
| CVE-2019-10155 | 3.1 | Jun 12 | The Libreswan Project has found a vulnerability in the processing of IKEv1 informational exchange packets which are encrypted and integrity protected using the established IKE SA… Affected: before 3.29 |
| CVE-2015-3240 | – | Nov 9 | The pluto IKE daemon in libreswan before 3.15 and Openswan before 2.6.45, when built with NSS, allows remote attackers to cause a denial of service (assertion failure and daemon… Affected: 3.14 |
| CVE-2015-3204 | – | Jul 1 | libreswan 3.9 through 3.12 allows remote attackers to cause a denial of service (daemon restart) via an IKEv1 packet with (1) unassigned bits set in the IPSEC DOI value or (2) the… Affected: 3.9; 3.10; 3.11; 3.12 |
| CVE-2013-6467 | – | Jan 26 | Libreswan 3.7 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon restart) via IKEv2 packets that lack expected payloads Affected: through 3.7; 3.0; 3.1; 3.2; 3.3; 3.4; +2 more |
| CVE-2013-7294 | – | Jan 16 | The ikev2parent_inI1outR1 function in pluto/ikev2_parent.c in libreswan before 3.7 allows remote attackers to cause a denial of service (restart) via an IKEv2 I1 notification… Affected: through 3.6; 3.0; 3.1; 3.2; 3.3; 3.4; +1 more |
| CVE-2013-7283 | – | Jan 9 | Race condition in the libreswan.spec files for Red Hat Enterprise Linux (RHEL) and Fedora packages in libreswan 3.6 has unspecified impact and attack vectors, involving the… Affected: 3.6 |
| CVE-2013-4564 | – | Jan 7 | Libreswan 3.6 allows remote attackers to cause a denial of service (crash) via a small length value and (1) no version or (2) an invalid major number in an IKE packet Affected: 3.6 |
| CVE-2013-2052 | – | Jul 9 | Buffer overflow in the atodn function in libreswan 3.0 and 3.1, when Opportunistic Encryption is enabled and an RSA key is being used, allows remote attackers to cause a denial of… Affected: 3.0; 3.1 |
Showing 24