Lucene search

Alpine Linux Development TeamALPINE:CVE-2024-2357

HistoryMar 11, 2024 - 8:15 p.m.

CVE-2024-2357

2024-03-1120:15:07

Alpine Linux Development Team

security.alpinelinux.org

libreswan project

ikev2

presharedkeys

dos

unix

AI Score

6.1

Confidence

Low

EPSS

Percentile

15.5%

JSON

The Libreswan Project was notified of an issue causing libreswan to restart under some IKEv2 retransmit scenarios when a connection is configured to use PreSharedKeys (authby=secret) and the connection cannot find a matching configured secret. When such a connection is automatically added on startup using the auto= keyword, it can cause repeated crashes leading to a Denial of Service.

OSVersionArchitecturePackageVersionFilename
Alpineedge-communitynoarchlibreswan< 4.15-r0UNKNOWN
Alpine3.20-communitynoarchlibreswan< 4.15-r0UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Alpine	edge-community	noarch	libreswan	< 4.15-r0	UNKNOWN
Alpine	3.20-community	noarch	libreswan	< 4.15-r0	UNKNOWN