libreswan

Latest CVEs · RSS

• CVE-2026-77207 2026-10-13 · CVSS 7.5
  Libreswan has a null pointer dereference bug in the PKCS#7 handling code for IKE certificate authentication. When libreswan decodes an IKE CERT payload of type
• CVE-2026-77206 2026-10-13 · CVSS 7.5
  Libreswan's IKEv2 state machine has a null pointer dereference bug in the EAP handling code for authentication. As a result of inconsistency within the IKEv2 st
• CVE-2026-77205 2026-10-13 · CVSS 3.7
  Libreswan in FIPS mode has a vulnerability where badly formed received certificates are rejected, but not deleted from the NSS cache. As a result, any real cert
• CVE-2026-94453 2026-10-13 · CVSS 7.5
  Libreswan's pluto daemon has a use-after-free vulnerability when a client connecting using IKE over TCP closes the connection and another packet (retransmit or
• CVE-2026-14957 2026-09-02 · CVSS 7.5
  In FIPS mode, Libreswan's add_decoded_cert() function calls CERT_ExtractPublicKey() and asserts that the result is not NULL. However, CERT_ExtractPublicKey() re
• CVE-2026-50721 2026-07-02 · CVSS 7.5
  Libreswan, via the function RSA_authenticate_hash_signature_raw_rsa(), did not correctly verify the length of the authentication hash when the SIG payload of an
• CVE-2026-50722 2026-07-02 · CVSS 7.5
  Libreswan, via the function RSA_authenticate_hash_signature_pkcs1_1_5_rsa(), did not correctly verify the DER encoding of the ASN.1 digest when the IKEv2 AUTH p
• CVE-2026-12413 2026-07-02 · CVSS 7.5
  An invalidly formatted IKEv2 fragment causes the Libreswan pluto daemon to crash and restart. Continued exploitation would cause a denial of service. The functi
• CVE-2024-3652 2024-04-11
  The Libreswan Project was notified of an issue causing libreswan to restart when using IKEv1 without specifying an esp= line. When the peer requests AES-GMAC, l
• CVE-2024-2357 2024-03-11
  The Libreswan Project was notified of an issue causing libreswan to restart under some IKEv2 retransmit scenarios when a connection is configured to use PreShar