RHEL 8 : libreswan (RHSA-2024:1998)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:1998 advisory. Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both...

libreswan security and bug fix update

4.12-1.0.1.1 - Add libreswan-oracle.patch to detect Oracle Linux distro 4.12-1.1 - Fix CVE-2024-2357 RHEL-29734 - x509: unpack IPv6 general names based on length RHEL-32719 4.12-1 - Update to 4.12 to fix CVE-2023-38710, CVE-2023-38711, CVE-2023-38712 - Resolves: rhbz2215956 4.9-5 - Just bumping u...

Moderate: libreswan security update

Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network VPN...

libreswan security update

4.12-2.0.1.2 - Add libreswan-oracle.patch to detect Oracle Linux distro 4.12-2.2 - Fix patch application in the previous change 4.12-2.1 - Fix CVE-2024-2357 RHEL-28742...

Medium: libreswan

Issue Overview: The Libreswan Project was notified of an issue causing libreswan to restart under some IKEv2 retransmit scenarios when a connection is configured to use PreSharedKeys authby=secret and the connection cannot find a matching configured secret. When such a connection is automatically...

Medium: libreswan

Issue Overview: The Libreswan Project was notified of an issue causing libreswan to restart under some IKEv2 retransmit scenarios when a connection is configured to use PreSharedKeys authby=secret and the connection cannot find a matching configured secret. When such a connection is automatically...

OESA-2024-1409 libreswan security update

Libreswan is an implementation of IKEv1 and IKEv2 for IPsec. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks. Everything passing through the...

Mageia: Security Advisory (MGASA-2024-0113)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated libreswan packages fix security vulnerabilities

The Libreswan Project was notified of an issue causing libreswan to restart under some IKEv2 retransmit scenarios when a connection is configured to use PreSharedKeys authby=secret and the connection cannot find a matching configured secret. When such a connection is automatically added on startu...

Fedora 38 : libreswan (2024-1439ec2069)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-1439ec2069 advisory. Update to 4.14 for CVE-2024-2357, v6 SAN name and TFC padding fix for AEAD Tenable has extracted the preceding description block directly from the Fedora...

Fedora 39 : libreswan (2024-312a5ed3d5)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-312a5ed3d5 advisory. Update to 4.14 for CVE-2024-2357, v6 SAN name and TFC padding fix for AEAD Tenable has extracted the preceding description block directly from the Fedora...

CVE-2024-2357

A flaw was found in Libreswan. This issue causes Libreswan to restart under some IKEv2 retransmit scenarios when a connection is configured to use PreSharedKeys authby=secret, and the connection cannot find a matching configured secret. When automatically added on startup using the auto= keyword,...

CVE-2024-2357

creationtimestamp| type| source ---|---|--- 2024-03-11 21:26:51+00:00| seen| https://t.me/ctinow/205066 2024-03-11 21:26:55+00:00| seen| https://t.me/ctinow/205070 2024-03-14 17:51:50+00:00| seen| https://t.me/ctinow/207983...

CVE-2024-2357 IKEv2 misconfiguration can cause libreswan to abort and restart

The Libreswan Project was notified of an issue causing libreswan to restart under some IKEv2 retransmit scenarios when a connection is configured to use PreSharedKeys authby=secret and the connection cannot find a matching configured secret. When such a connection is automatically added on startu...

CVE-2024-2357

CVE-2024-2357 (Libreswan) : Affects Libreswan with PreSharedKeys (authby=secret). If a connection cannot find a matching secret and is auto-added at startup (auto=), it can crash repeatedly, causing Denial of Service. Connected sources indicate a patched Libreswan release is available; remediatio...

CVE-2024-2357 IKEv2 misconfiguration can cause libreswan to abort and restart

The Libreswan Project was notified of an issue causing libreswan to restart under some IKEv2 retransmit scenarios when a connection is configured to use PreSharedKeys authby=secret and the connection cannot find a matching configured secret. When such a connection is automatically added on startu...

openSUSE: Security Advisory for python3 (SUSE-SU-2022:2357-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2016-2357

creationtimestamp| type| source ---|---|--- 2024-01-27 14:11:19+00:00| seen| https://t.me/ctinow/174771...

Amazon Linux 2 : gawk (ALAS-2023-2357)

The version of gawk installed on the remote host is prior to 4.0.2-4. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2357 advisory. A heap out-of-bounds read flaw was found in builtin.c in the gawk package which may result in a crash of the software. CVE-2023-4156...

AlmaLinux 9 : git-lfs (ALSA-2023:2357)

The remote AlmaLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2023:2357 advisory. - Acceptance of some invalid Transfer-Encoding headers in the HTTP/1 client in net/http before Go 1.17.12 and Go 1.18.4 allows HTTP request smuggling if...