Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2024-2357

IKEv2 misconfiguration can cause libreswan to abort and restart

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
libreswan

Description

The Libreswan Project was notified of an issue causing libreswan to restart under some IKEv2 retransmit scenarios when a connection is configured to use PreSharedKeys (authby=secret) and the connection cannot find a matching configured secret. When such a connection is automatically added on startup using the auto= keyword, it can cause repeated crashes leading to a Denial of Service.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

The Libreswan Project (www.libreswan.org) libreswan

Default version status: unaffected

  • 3.0 to ≤ 4.1unaffected
  • 4.2 to ≤ 4.12affected
  • 5.0unaffected

References