p PatchFirst

CVE-2024-2357

CVE-2024-2357 · IKEv2 misconfiguration can cause libreswan to abort and restart

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The Libreswan Project was notified of an issue causing libreswan to restart under some IKEv2 retransmit scenarios when a connection is configured to use PreSharedKeys (authby=secret) and the connection cannot find a matching configured secret. When such a connection is automatically added on startup using the auto= keyword, it can cause repeated crashes leading to a Denial of Service.

CVSS 6.5 · Medium · EPSS 1.0% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • libreswan

    Versions
    • ≥ 3.0, ≤ 4.1: Not affected (semver)
    • ≥ 4.2, ≤ 4.12: Affected (semver)
    • 5.0: Not affected

    No fix published

  • libreswan Debian:12

    Versions
    • 4.10-2
    • 4.10-2+deb12u1
    • 4.11-1
    • 4.12-1
    • 4.12-2
    • 4.12-3
    • 4.14-1
    • 4.14-1.1
    • 4.15-1
    • 5.0~rc2-1
    • 5.0~rc2-2
    • 5.2-1
    • 5.2-2
    • 5.2-2.1
    • 5.2-2.2
    • 5.2-2.3
    • 5.2-2.4
    • 5.2-2.5
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • libreswan Debian:13

    Affected ranges
    • ECOSYSTEM: < 4.14-1

    Update to 4.14-1

  • libreswan Debian:14

    Affected ranges
    • ECOSYSTEM: < 4.14-1

    Update to 4.14-1

  • libreswan Ubuntu:18.04:LTS

    Versions
    • 3.20-7build1
    • 3.21-2
    • 3.22-1
    • 3.22-2
    • 3.22-3
    • 3.22-4
    • 3.23-1
    • 3.23-4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • libreswan Ubuntu:20.04:LTS

    Versions
    • 3.29-2
    • 3.29-2build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • libreswan Ubuntu:22.04:LTS

    Versions
    • 3.32-3ubuntu3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • libreswan Ubuntu:24.04:LTS

    Versions
    • 4.11-1ubuntu1
    • 4.12-1ubuntu1
    • 4.14-1ubuntu1
    • 4.14-1ubuntu2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →