LI
Vendor
Libreswan
24
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-50721 | LI Libreswan Libreswan | 5.9 | Jul 2 | IKEv1 Denial of Service via RSA-SHA1 (PKCS#1 Version 1.5 Encrypted) authentication payload |
| CVE-2026-50722 | LI Libreswan Libreswan | 5.9 | Jul 2 | IKEv2 Denial of Service via RSA-SHA1 (PKCS#1 RSASSA-PKCS1-v1_5) authentication payload |
| CVE-2026-12413 | LI Libreswan Libreswan | 7.5 | Jul 2 | IKEv2 Denial of Service via malformed fragmentation |
| CVE-2024-3652 | LI Libreswan Libreswan | 6.5 | Apr 11 | IKEv1 default AH/ESP responder can cause libreswan to abort and restart |
| CVE-2023-38712 | LI Libreswan Libreswan | 6.5 | Aug 25 | An issue was discovered in Libreswan 3.x and 4.x before 4.12 |
| CVE-2023-38711 | LI Libreswan Libreswan | 6.5 | Aug 25 | An issue was discovered in Libreswan before 4.12 |
| CVE-2023-38710 | LI Libreswan Libreswan | 6.5 | Aug 25 | An issue was discovered in Libreswan before 4.12 |
| CVE-2023-30570 | LI Libreswan Libreswan | 7.5 | May 29 | pluto in Libreswan before 4.11 allows a denial of service (responder SPI mishandling and daemon crash) via unauthenticated IKEv1 Aggressive Mode packets |
| CVE-2023-2295 | LI Libreswan Libreswan | 7.5 | May 17 | A vulnerability was found in the libreswan library |
| CVE-2023-23009 | LI Libreswan Libreswan | 6.5 | Feb 21 | Libreswan 4.9 allows remote attackers to cause a denial of service (assert failure and daemon restart) via crafted TS payload with an incorrect selector length |
| CVE-2022-23094 | LI Libreswan Libreswan | 7.5 | Jan 15 | Libreswan 4.2 through 4.5 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted IKEv1 packet because pluto/ikev1.c wrongly… |
| CVE-2020-1763 | LI Libreswan Libreswan | 7.5 | May 12 | An out-of-bounds buffer read flaw was found in the pluto daemon of libreswan from versions 3.27 till 3.31 where, an unauthenticated attacker could use this flaw to crash libreswan… |
| CVE-2019-10155 | LI Libreswan Libreswan | 3.1 | Jun 12 | The Libreswan Project has found a vulnerability in the processing of IKEv1 informational exchange packets which are encrypted and integrity protected using the established IKE SA… |
| CVE-2019-12312 | LI Libreswan Libreswan | 7.5 | May 24 | In Libreswan 3.27 an assertion failure can lead to a pluto IKE daemon restart |
| CVE-2016-5391 | LI Libreswan Libreswan | 7.5 | Jun 13 | libreswan before 3.18 allows remote attackers to cause a denial of service (NULL pointer dereference and pluto daemon restart) |
| CVE-2016-5361 | LI Libreswan Libreswan | 7.5 | Jun 16 | programs/pluto/ikev1.c in libreswan before 3.17 retransmits in initial-responder states, which allows remote attackers to cause a denial of service (traffic amplification) via a… |
| CVE-2016-3071 | LI Libreswan Libreswan | 7.5 | Apr 18 | Libreswan 3.16 might allow remote attackers to cause a denial of service (daemon restart) via an IKEv2 aes_xcbc transform |
| CVE-2015-3240 | LI Libreswan Libreswan | – | Nov 9 | The pluto IKE daemon in libreswan before 3.15 and Openswan before 2.6.45, when built with NSS, allows remote attackers to cause a denial of service (assertion failure and daemon… |
| CVE-2015-3204 | LI Libreswan Libreswan | – | Jul 1 | libreswan 3.9 through 3.12 allows remote attackers to cause a denial of service (daemon restart) via an IKEv1 packet with (1) unassigned bits set in the IPSEC DOI value or (2) the… |
| CVE-2013-6467 | LI Libreswan Libreswan | – | Jan 26 | Libreswan 3.7 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon restart) via IKEv2 packets that lack expected payloads |
| CVE-2013-7294 | LI Libreswan Libreswan | – | Jan 16 | The ikev2parent_inI1outR1 function in pluto/ikev2_parent.c in libreswan before 3.7 allows remote attackers to cause a denial of service (restart) via an IKEv2 I1 notification… |
| CVE-2013-7283 | LI Libreswan Libreswan | – | Jan 9 | Race condition in the libreswan.spec files for Red Hat Enterprise Linux (RHEL) and Fedora packages in libreswan 3.6 has unspecified impact and attack vectors, involving the… |
| CVE-2013-4564 | LI Libreswan Libreswan | – | Jan 7 | Libreswan 3.6 allows remote attackers to cause a denial of service (crash) via a small length value and (1) no version or (2) an invalid major number in an IKE packet |
| CVE-2013-2052 | LI Libreswan Libreswan | – | Jul 9 | Buffer overflow in the atodn function in libreswan 3.0 and 3.1, when Opportunistic Encryption is enabled and an RSA key is being used, allows remote attackers to cause a denial of… |