Lucene search

K
mageiaGentoo FoundationMGASA-2024-0113
HistoryApr 07, 2024 - 1:16 a.m.

Updated libreswan packages fix security vulnerabilities

2024-04-0701:16:44
Gentoo Foundation
advisories.mageia.org
19
libreswan
security vulnerabilities
presharedkeys
ikev2
denial of service
cve-2024-2357
unix

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

The Libreswan Project was notified of an issue causing libreswan to restart under some IKEv2 retransmit scenarios when a connection is configured to use PreSharedKeys (authby=secret) and the connection cannot find a matching configured secret. When such a connection is automatically added on startup using the auto= keyword, it can cause repeated crashes leading to a Denial of Service. (CVE-2024-2357)

OSVersionArchitecturePackageVersionFilename
Mageia9noarchlibreswan< 4.14-1libreswan-4.14-1.mga9