Lucene search
GoogleOSV:CVE-2024-2357HistoryMar 11, 2024 - 8:15 p.m.
CVE-2024-2357
2024-03-1120:15:07
Google
osv.dev
1
libreswan
ikev2
presharedkeys
dos
issue
software
The Libreswan Project was notified of an issue causing libreswan to restart under some IKEv2 retransmit scenarios when a connection is configured to use PreSharedKeys (authby=secret) and the connection cannot find a matching configured secret. When such a connection is automatically added on startup using the auto= keyword, it can cause repeated crashes leading to a Denial of Service.
References
libreswan.org/security/CVE-2024-2357
lists.fedoraproject.org/archives/list/[email protected]/message/EJZJYFHKBIJ4ZK5GAWWFFR3AKJS6O5JX/
lists.fedoraproject.org/archives/list/[email protected]/message/HEM46ALKF7NG6CAUKZ7KQERVOHWQIQKY/
lists.fedoraproject.org/archives/list/[email protected]/message/TVQ7MZY6LFFGRWAJNTKKN2VSEFS2VPAR/
Related
nessus
nessus
Amazon Linux 2023 : libreswan (ALAS2023-2024-587)
2024-04-17 00:00:00
RHEL 9 : libreswan (RHSA-2024:2033)
2024-04-24 00:00:00
AlmaLinux 8 : libreswan (ALSA-2024:1998)
2024-04-29 00:00:00
redhat
redhat
(RHSA-2024:2081) Moderate: libreswan security update
2024-04-29 01:07:45
(RHSA-2024:2082) Moderate: libreswan security update
2024-04-29 01:07:46
(RHSA-2024:2085) Moderate: libreswan security and bug fix update
2024-04-29 01:07:51
fedora
fedora
[SECURITY] Fedora 38 Update: libreswan-4.14-1.fc38
2024-03-21 01:28:26
[SECURITY] Fedora 40 Update: libreswan-4.14-1.fc40
2024-03-23 00:51:20
[SECURITY] Fedora 39 Update: libreswan-4.14-1.fc39
2024-03-21 01:13:33
oraclelinux
oraclelinux
libreswan security and bug fix update
2024-04-24 00:00:00
libreswan security update
2024-04-23 00:00:00
libreswan security update
2024-05-07 00:00:00
debiancve
debiancve
CVE-2024-2357
2024-03-11 20:15:07
openvas
openvas
Mageia: Security Advisory (MGASA-2024-0113)
2024-04-09 00:00:00
Fedora: Security Advisory for libreswan (FEDORA-2024-92f0c71a01)
2024-03-25 00:00:00
Fedora: Security Advisory for libreswan (FEDORA-2024-1439ec2069)
2024-03-25 00:00:00
osv
osv
Moderate: libreswan security and bug fix update
2024-04-24 00:00:00
Moderate: libreswan security update
2024-05-06 13:04:21
Moderate: libreswan security update
2024-04-30 00:00:00
rocky
rocky
libreswan bug fix and enhancement update
2024-06-14 13:59:30
libreswan security update
2024-05-06 13:04:21
libreswan security update
2024-05-10 14:32:42
ubuntucve
ubuntucve
CVE-2024-2357
2024-03-11 00:00:00
cve
cve
CVE-2024-2357
2024-03-11 20:15:07
cvelist
cvelist
almalinux
almalinux
Moderate: libreswan security update
2024-04-23 00:00:00
Moderate: libreswan security and bug fix update
2024-04-24 00:00:00
Moderate: libreswan security update
2024-04-30 00:00:00
redhatcve
redhatcve
CVE-2024-2357
2024-03-14 16:45:16
nvd
nvd
CVE-2024-2357
2024-03-11 20:15:07
mageia
mageia
Updated libreswan packages fix security vulnerabilities
2024-04-07 01:16:44
alpinelinux
alpinelinux
CVE-2024-2357
2024-03-11 20:15:07
veracode
veracode
Denial Of Service (DOS)
2024-03-16 23:59:27
redos
redos
ROS-20240423-04
2024-04-23 00:00:00