https://vulnogram.org/ Most recent CVEs assigned by Libreswan Project (libreswan). https://vulnogram.org/seaview/icons/libreswan.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-77207 https://vulnogram.org/CVE-2026-77207 Libreswan has a null pointer dereference bug in the PKCS#7 handling code for IKE certificate authentication. When libreswan decodes an IKE CERT payload of type CERT_PKCS7_WRAPPED_X509, it guards the PKCS#7 blob with SEC_PKCS7ContainsCertsOrCrls() and… High Network Exploitable Tue, 13 Oct 2026 21:28:19 GMT https://vulnogram.org/CVE-2026-77206 https://vulnogram.org/CVE-2026-77206 Libreswan's IKEv2 state machine has a null pointer dereference bug in the EAP handling code for authentication. As a result of inconsistency within the IKEv2 state machine code, this bug can be triggered by any IKEv2 connection, even if EAP is not co… High Network Exploitable Tue, 13 Oct 2026 21:28:11 GMT https://vulnogram.org/CVE-2026-77205 https://vulnogram.org/CVE-2026-77205 Libreswan in FIPS mode has a vulnerability where badly formed received certificates are rejected, but not deleted from the NSS cache. As a result, any real certificates with the same serial number are rejected as well. This can be abused to lock out… Low Network Exploitable Tue, 13 Oct 2026 21:28:03 GMT https://vulnogram.org/CVE-2026-94453 https://vulnogram.org/CVE-2026-94453 Libreswan's pluto daemon has a use-after-free vulnerability when a client connecting using IKE over TCP closes the connection and another packet (retransmit or malicious) is received for the same tuple. IKE state is retained in memory after the clien… High Network Exploitable Tue, 13 Oct 2026 21:27:43 GMT https://vulnogram.org/CVE-2026-14957 https://vulnogram.org/CVE-2026-14957 In FIPS mode, Libreswan's add_decoded_cert() function calls CERT_ExtractPublicKey() and asserts that the result is not NULL. However, CERT_ExtractPublicKey() returns NULL when public key extraction fails, for example if the RSA exponent is set to 0.… High Network Exploitable Wed, 02 Sep 2026 02:19:00 GMT https://vulnogram.org/CVE-2026-50721 https://vulnogram.org/CVE-2026-50721 Libreswan, via the function RSA_authenticate_hash_signature_raw_rsa(), did not correctly verify the length of the authentication hash when the SIG payload of an IKEv1 packet was encoded using PKCS #1 RSA Encryption as per RFC 2313. A remote attacker… High Network Exploitable Thu, 02 Jul 2026 21:44:09 GMT https://vulnogram.org/CVE-2026-50722 https://vulnogram.org/CVE-2026-50722 Libreswan, via the function RSA_authenticate_hash_signature_pkcs1_1_5_rsa(), did not correctly verify the DER encoding of the ASN.1 digest when the IKEv2 AUTH payload was encoded using RSASSA-PKCS1-v1_5 (RFC 8017). A remote attacker can use a variati… High Network Exploitable Thu, 02 Jul 2026 21:34:41 GMT https://vulnogram.org/CVE-2026-12413 https://vulnogram.org/CVE-2026-12413 An invalidly formatted IKEv2 fragment causes the Libreswan pluto daemon to crash and restart. Continued exploitation would cause a denial of service. The function reassemble_v2_incoming_fragments() would ignore unknown outer payloads but still store… High Network Exploitable Thu, 02 Jul 2026 21:19:22 GMT https://vulnogram.org/CVE-2024-3652 https://vulnogram.org/CVE-2024-3652 The Libreswan Project was notified of an issue causing libreswan to restart when using IKEv1 without specifying an esp= line. When the peer requests AES-GMAC, libreswan's default proposal handler causes an assertion failure and crashes and restarts.… Medium Thu, 11 Apr 2024 01:32:13 GMT https://vulnogram.org/CVE-2024-2357 https://vulnogram.org/CVE-2024-2357 The Libreswan Project was notified of an issue causing libreswan to restart under some IKEv2 retransmit scenarios when a connection is configured to use PreSharedKeys (authby=secret) and the connection cannot find a matching configured secret. When s… Medium Mon, 11 Mar 2024 19:39:03 GMT