3 results · Clear filters · Feed
-
Medium 6.5
IKEv1 default AH/ESP responder can cause libreswan to abort and restart
The Libreswan Project was notified of an issue causing libreswan to restart when using IKEv1 without specifying an esp= line. When the peer requests AES-GMAC, libreswan's default proposal handler causes an assertion failure and crashes and restarts. IKEv2 con…
-
Medium 6.5
IKEv2 misconfiguration can cause libreswan to abort and restart
The Libreswan Project was notified of an issue causing libreswan to restart under some IKEv2 retransmit scenarios when a connection is configured to use PreSharedKeys (authby=secret) and the connection cannot find a matching configured secret. When such a con…
-
Medium 6.5
Libreswan 4.9 allows remote attackers to cause a denial of service (assert failure and daemon restart) via crafted TS p…