Moderate: libreswan security update
Summary
ALSA-2024:4050: Moderate: libreswan security update. Affects libreswan versions < 4.12-2.el9_4.1. Fixed in 4.12-2.el9_4.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network (VPN).
Vulnerability Detail
The libreswan package is affected by a moderate security vulnerability. The vulnerability, identified as CVE-2024-3652, relates to the default AH/ESP responder in IKEv1, which can crash and restart. This vulnerability could potentially lead to service disruption and impact the availability of secure tunnels established through IPsec.
How To Fix
Minimum fixed version
4.12-2.el9_4.1
This is the first release that contains the fix.
sudo dnf update libreswanTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
The libreswan package is affected by a moderate security vulnerability that can cause the default AH/ESP responder in IKEv1 to crash and restart. To mitigate the risk, it is important to update the libreswan package to version 4.12-2.el9_4.1 or later.
See every vulnerability recorded for libreswan →
FAQ
Libreswan is an implementation of IPsec and IKE for Linux, providing authentication and encryption services for secure tunnels.
The vulnerability can cause the default AH/ESP responder in IKEv1 to crash and restart, potentially leading to service disruption and impacting secure tunnels.
To mitigate the risk, it is recommended to update the libreswan package to version 4.12-2.el9_4.1 or later, which includes the necessary security patches.
No known workarounds are available for this vulnerability. Updating the libreswan package is the recommended solution.
You can find more information about this vulnerability, including its impact and CVSS score, on the CVE page: CVE-2024-3652.
Related vulnerabilities
Recent vulnerabilities recorded for libreswan.
