Lucene search
Gentoo FoundationMGASA-2024-0138HistoryApr 19, 2024 - 4:16 a.m.
Updated libreswan packages fix security vulnerability
2024-04-1904:16:42
Gentoo Foundation
advisories.mageia.org
13
libreswan project
security vulnerability
fix
cve-2024-3652
ikev1
aes-gmac
assertion failure
crash
restart
ikev2
unix
CVE-2024-3652: The Libreswan Project was notified of an issue causing libreswan to restart when using IKEv1 without specifying an esp= line. When the peer requests AES-GMAC, libreswan’s default proposal handler causes an assertion failure and crashes and restarts. IKEv2 connections are not affected.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 9 | noarch | libreswan | < 4.15-1 | libreswan-4.15-1.mga9 |
References
Related
cvelist
cvelist
alpinelinux
alpinelinux
CVE-2024-3652
2024-04-11 02:15:47
debiancve
debiancve
CVE-2024-3652
2024-04-11 02:15:47
ubuntucve
ubuntucve
CVE-2024-3652
2024-04-11 00:00:00
redhatcve
redhatcve
CVE-2024-3652
2024-04-17 13:03:32
cbl_mariner
cbl_mariner
CVE-2024-3652 affecting package libreswan for versions less than 4.14-2
2024-04-30 01:31:53
cve
cve
CVE-2024-3652
2024-04-11 02:15:47
nessus
nessus
Libreswan 3.22 < 4.15 / 5.0rc1 < 5.0 DoS
2024-04-25 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2024-0138)
2024-04-19 00:00:00