Lucene search

K
redhatcveRedhat.comRH:CVE-2019-10155
HistoryApr 05, 2020 - 11:08 p.m.

CVE-2019-10155

2020-04-0523:08:18
redhat.com
access.redhat.com
7

0.001 Low

EPSS

Percentile

48.8%

A vulnerability was found in the Libreswan Project. It was discovered that libreswan, strongswan, and openswan did not verify the integrity check value for received IKEv1 Informational Exchange packets.

Mitigation

If all IKE peers support IKEv2, it is possible to reconfigure IKEv1 connections to use IKEv2 via the "ikev2=insist" keyword.