CVE-2024-3652

Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

Published: 11/04/2024 Updated: 01/05/2024

The Libreswan Project was notified of an issue causing libreswan to restart when using IKEv1 without specifying an esp= line. When the peer requests AES-GMAC, libreswan's default proposal handler causes an assertion failure and crashes and restarts. IKEv2 connections are not affected.

Debian Bug report logs - #1069194 libreswan: CVE-2024-3652: IKEv1 default AH/ESP responder can crash and restart Package: src:libreswan; Maintainer for src:libreswan is Daniel Kahn Gillmor <dkg@fifthhorsemannet>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Wed, 17 Apr 2024 19:27:01 UTC Severity: impo ...

Hello, I noticed I missed a few CVEs on libreswan recently as the project is not posting them here, I subscribed to their announce mailing-list to monitor that for work, and thought I could try to follow and post them here when there are new things That being said, here is the latest one: Vulnerability information ========================= The f ...

https://libreswan.org/security/CVE-2024-3652 http://www.openwall.com/lists/oss-security/2024/04/18/2 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1069194 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2024-3652

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Mailing Lists

References

Vulmon Search

About

Products

Connect