Lucene search

K
mageiaGentoo FoundationMGASA-2024-0113
HistoryApr 07, 2024 - 1:16 a.m.

Updated libreswan packages fix security vulnerabilities

2024-04-0701:16:44
Gentoo Foundation
advisories.mageia.org
25
libreswan
security vulnerabilities
presharedkeys
ikev2
denial of service
cve-2024-2357
unix

AI Score

6.8

Confidence

Low

EPSS

0

Percentile

15.5%

The Libreswan Project was notified of an issue causing libreswan to restart under some IKEv2 retransmit scenarios when a connection is configured to use PreSharedKeys (authby=secret) and the connection cannot find a matching configured secret. When such a connection is automatically added on startup using the auto= keyword, it can cause repeated crashes leading to a Denial of Service. (CVE-2024-2357)

OSVersionArchitecturePackageVersionFilename
Mageia9noarchlibreswan< 4.14-1libreswan-4.14-1.mga9