LI
Product
Libreswan
24
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 9Medium 7Low 1
Watch
Add Libreswan to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-12413 | 7.5 | Jul 2 | IKEv2 Denial of Service via malformed fragmentation Affected: 4.6 before 5.3.1 |
| CVE-2023-30570 | 7.5 | May 29 | pluto in Libreswan before 4.11 allows a denial of service (responder SPI mishandling and daemon crash) via unauthenticated IKEv1 Aggressive Mode packets Affected: 3.28 through 4.10 |
| CVE-2023-2295 | 7.5 | May 17 | A vulnerability was found in the libreswan library Affected: 4.9-1.el8; 4.9-1.el9 |
| CVE-2022-23094 | 7.5 | Jan 15 | Libreswan 4.2 through 4.5 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted IKEv1 packet because pluto/ikev1.c wrongly… Affected: 4.2 before 4.6 |
| CVE-2020-1763 | 7.5 | May 12 | An out-of-bounds buffer read flaw was found in the pluto daemon of libreswan from versions 3.27 till 3.31 where, an unauthenticated attacker could use this flaw to crash libreswan… Affected: 3.27 through 3.31; 3.5 |
| CVE-2019-12312 | 7.5 | May 24 | In Libreswan 3.27 an assertion failure can lead to a pluto IKE daemon restart Affected: before 3.28 |
| CVE-2016-5391 | 7.5 | Jun 13 | libreswan before 3.18 allows remote attackers to cause a denial of service (NULL pointer dereference and pluto daemon restart) Affected: through 3.17 |
| CVE-2016-5361 | 7.5 | Jun 16 | programs/pluto/ikev1.c in libreswan before 3.17 retransmits in initial-responder states, which allows remote attackers to cause a denial of service (traffic amplification) via a… Affected: through 3.16 |
| CVE-2016-3071 | 7.5 | Apr 18 | Libreswan 3.16 might allow remote attackers to cause a denial of service (daemon restart) via an IKEv2 aes_xcbc transform Affected: 3.16 |
Showing 9