The vulnerability of the client plugin libreswan in the NetworkManager software is related to improper code generation. This allows attackers to increase their privileges and execute arbitrary code.

The vulnerability of the client plugin libreswan in the NetworkManager network management software is related to incorrect code generation. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...

Fedora 41 : libreswan (2024-342c3cc98f)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-342c3cc98f advisory. Automatic update for libreswan-4.15-2.fc41. Changelog Sat Jun 22 2024 Paul Wouters - 4.15-2 - Add libreswan-4.15-ipsecimport.patch Sat Jun 22 2024 Paul Woute...

Important: Red Hat Security Advisory: NetworkManager-libreswan security update

An update for NetworkManager-libreswan is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...

NetworkManager-libreswan: Local privilege escalation via leftupdown

A flaw was found in the libreswan client plugin for NetworkManager NetkworkManager-libreswan, where it fails to properly sanitize the VPN configuration from the local unprivileged user. In this configuration, composed by a key-value format, the plugin fails to escape special characters, leading t...

NetworkManager-libreswan: Local privilege escalation via leftupdown

A flaw was found in the libreswan client plugin for NetworkManager NetkworkManager-libreswan, where it fails to properly sanitize the VPN configuration from the local unprivileged user. In this configuration, composed by a key-value format, the plugin fails to escape special characters, leading t...

Important: Red Hat Security Advisory: NetworkManager-libreswan security update

An update for NetworkManager-libreswan is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Mageia: Security Advisory (MGASA-2024-0356)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Important: NetworkManager-libreswan security update

This package contains software for integrating the libreswan VPN software with NetworkManager and the GNOME desktop Security Fixes: NetworkManager-libreswan: Local privilege escalation via leftupdown CVE-2024-9050 For more details about the security issues, including the impact, a CVSS score,...

ALSA-2024:9555 Important: NetworkManager-libreswan security update

This package contains software for integrating the libreswan VPN software with NetworkManager and the GNOME desktop Security Fixes: NetworkManager-libreswan: Local privilege escalation via leftupdown CVE-2024-9050 For more details about the security issues, including the impact, a CVSS score,...

Updated networkmanager-libreswan packages fix security vulnerability

A flaw was found in the libreswan client plugin for NetworkManager NetkworkManager-libreswan, where it fails to properly sanitize the VPN configuration from the local unprivileged user. In this configuration, composed by a key-value format, the plugin fails to escape special characters, leading t...

MGASA-2024-0356 Updated networkmanager-libreswan packages fix security vulnerability

A flaw was found in the libreswan client plugin for NetworkManager NetkworkManager-libreswan, where it fails to properly sanitize the VPN configuration from the local unprivileged user. In this configuration, composed by a key-value format, the plugin fails to escape special characters, leading t...

Oracle Linux 7 : NetworkManager-libreswan (ELSA-2024-8357)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-8357 advisory. 1.2.4-2.0.1 - Fix improper escaping of Libreswan configuration CVE-2024-9050Orabug: 37206712 Tenable has extracted the preceding description block directly from...

NetworkManager-libreswan security update

1.2.4-2.0.1 - Fix improper escaping of Libreswan configuration CVE-2024-9050Orabug: 37206712...

OESA-2024-2331 NetworkManager-libreswan security update

This package provides easy connections to IPsec VPNs using NetworkManager and Libreswan. Security Fixes: A flaw was found in the libreswan client plugin for NetworkManager NetkworkManager-libreswan, where it fails to properly sanitize the VPN configuration from the local unprivileged user. In thi...

[SECURITY] Fedora 40 Update: NetworkManager-libreswan-1.2.24-1.fc40

This package contains software for integrating the libreswan VPN software with NetworkManager and the GNOME desktop...

[SECURITY] Fedora 39 Update: NetworkManager-libreswan-1.2.24-1.fc39

This package contains software for integrating the libreswan VPN software with NetworkManager and the GNOME desktop...

Fedora: Security Advisory (FEDORA-2024-d20b38c63f)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2024-e88cc97dba)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CBL Mariner 2.0 Security Update: libreswan (CVE-2024-3652)

The version of libreswan installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-3652 advisory. - The Libreswan Project was notified of an issue causing libreswan to restart when using IKEv1 without...

Fedora 39 : NetworkManager-libreswan (2024-d20b38c63f)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-d20b38c63f advisory. This is an update to 1.2.24 release of NetworkManager-libreswan, the IPSec VPN plugin for NetworkManager. It fixes a local privilege escalation bug due to...