Lucene search

K
alpinelinuxAlpine Linux Development TeamALPINE:CVE-2024-3652
HistoryApr 11, 2024 - 2:15 a.m.

CVE-2024-3652

2024-04-1102:15:47
Alpine Linux Development Team
security.alpinelinux.org
6
libreswan
cve-2024-3652
restart
ikev1
aes-gmac
unix
assertion failure

7.3 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

8.7%

The Libreswan Project was notified of an issue causing libreswan to restart when using IKEv1 without specifying an esp= line. When the peer requests AES-GMAC, libreswan’s default proposal handler causes an assertion failure and crashes and restarts. IKEv2 connections are not affected.

OSVersionArchitecturePackageVersionFilename
Alpineedge-communitynoarchlibreswan< 4.15-r0UNKNOWN
Alpine3.20-communitynoarchlibreswan< 4.15-r0UNKNOWN

7.3 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

8.7%