Lucene search

K
ubuntucveUbuntu.comUB:CVE-2024-3652
HistoryApr 11, 2024 - 12:00 a.m.

CVE-2024-3652

2024-04-1100:00:00
ubuntu.com
ubuntu.com
2
libreswan
security vulnerability
ikev1
restart
aes-gmac
assertion failure
crashes
restarts
ikev2
unix

7.3 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

8.7%

The Libreswan Project was notified of an issue causing libreswan to restart
when using IKEv1 without specifying an esp= line. When the peer requests
AES-GMAC, libreswan’s default proposal handler causes an assertion failure
and crashes and restarts. IKEv2 connections are not affected.

7.3 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

8.7%