VulertSecurity VulertSecurity

Vulnerability Database · Debian · libreswan · Version

libreswan 4.3-1 deb11u3

4.3-1 deb11u3 is affected by 12 vulnerabilities.

The vulnerabilities that cover this exact version are listed below with the fixed version to move to.

Critical 0 High 4 Medium 3 Low 0 Unrated 5

All libreswan versions & vulnerabilities → Search the database for this package →
Database updated 22/Oct/2026

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Vulnerabilities affecting this version

libreswan 4.3-1 deb11u3 vulnerabilities

12 vulnerabilities cover libreswan 4.3-1 deb11u3. Scroll the table for all of them, or open the full list in the database.

Vulnerability Severity Fixed version Disclosed
Critical Vulnerability in Libreswan: Authentication Hash Length Verification Flaw 8.1 high No fix published 02 Jul 2026
Critical Vulnerability in Libreswan: ASN.1 Digest Verification Flaw 8.1 high No fix published 02 Jul 2026
Denial of Service Vulnerability in Libreswan: IKEv2 Fragment Handling Issue 7.5 high No fix published 02 Jul 2026
Denial of Service Vulnerability in Libreswan: Unauthenticated IKEv1 Aggressive Mode Packet Handling 7.5 high 4.3-1+deb11u4 29 May 2023
Libreswan IKEv2 Child SA REKEY Packet Invalid IPsec Protocol ID Vulnerability 6.5 medium No fix published 25 Aug 2023
Null Pointer Dereference in Libreswan 6.5 medium No fix published 25 Aug 2023
Vulnerability in Internet Key Exchange v1 Main Mode 5.9 medium No fix published 06 Sep 2018
Critical Vulnerability in Libreswan: CVE-2026-14957 Exposes Security Risks N/A unrated No fix published 27 Jul 2026
Vulnerability in libreswan package: Assertion Failure and Restart N/A unrated No fix published 11 Apr 2024
CVE-2024-2357: Denial of Service in libreswan N/A unrated No fix published 11 Mar 2024
Denial of Service Vulnerability in Libreswan: Unauthenticated IKEv1 Aggressive Mode Packet Handling N/A unrated 4.3-1+deb11u4 29 May 2023
Critical Vulnerability in Libreswan and Strongswan: IKEv1 PSK Authentication Weakness N/A unrated No fix published 06 Sep 2018

Looking for another version, or everything Vulert holds for libreswan?

All versions → Full vulnerability list →

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About libreswan 4.3-1 deb11u3

Is libreswan 4.3-1 deb11u3 vulnerable?

Yes. 12 vulnerabilities in the Vulert database cover libreswan 4.3-1 deb11u3: 0 critical, 4 high, 3 medium and 0 low, plus 5 not yet rated. Each entry above names the fixed version to move to.

How do I monitor libreswan for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the libreswan version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.