CVE-2024-2357

2024-03-1120:15:07

Debian Security Bug Tracker

security-tracker.debian.org

libreswan project

ikev2 retransmit

presharedkeys

denial of service

unix

7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.6%

JSON

The Libreswan Project was notified of an issue causing libreswan to restart under some IKEv2 retransmit scenarios when a connection is configured to use PreSharedKeys (authby=secret) and the connection cannot find a matching configured secret. When such a connection is automatically added on startup using the auto= keyword, it can cause repeated crashes leading to a Denial of Service.

OSVersionArchitecturePackageVersionFilename
Debian12alllibreswan<= 4.10-2+deb12u1libreswan_4.10-2+deb12u1_all.deb
Debian11alllibreswan<= 4.3-1+deb11u4libreswan_4.3-1+deb11u4_all.deb
Debian10alllibreswan<= 3.27-6+deb10u1libreswan_3.27-6+deb10u1_all.deb
Debian999alllibreswan< 4.14-1libreswan_4.14-1_all.deb
Debian13alllibreswan< 4.14-1libreswan_4.14-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	libreswan	<= 4.10-2+deb12u1	libreswan_4.10-2+deb12u1_all.deb
Debian	11	all	libreswan	<= 4.3-1+deb11u4	libreswan_4.3-1+deb11u4_all.deb
Debian	10	all	libreswan	<= 3.27-6+deb10u1	libreswan_3.27-6+deb10u1_all.deb
Debian	999	all	libreswan	< 4.14-1	libreswan_4.14-1_all.deb
Debian	13	all	libreswan	< 4.14-1	libreswan_4.14-1_all.deb