Описание
The Libreswan Project has found a vulnerability in the processing of IKEv1 informational exchange packets which are encrypted and integrity protected using the established IKE SA encryption and integrity keys, but as a receiver, the integrity check value was not verified. This issue affects versions before 3.29.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support, was needed |
| cosmic | ignored | end of life |
| devel | released | 3.27-6 |
| disco | ignored | end of life |
| eoan | released | 3.27-6 |
| esm-apps/bionic | needed | |
| esm-apps/focal | released | 3.27-6 |
| esm-apps/jammy | released | 3.27-6 |
| esm-apps/noble | released | 3.27-6 |
| esm-apps/resolute | released | 3.27-6 |
Показывать по
EPSS
3.5 Low
CVSS2
3.1 Low
CVSS3
Связанные уязвимости
The Libreswan Project has found a vulnerability in the processing of IKEv1 informational exchange packets which are encrypted and integrity protected using the established IKE SA encryption and integrity keys, but as a receiver, the integrity check value was not verified. This issue affects versions before 3.29.
The Libreswan Project has found a vulnerability in the processing of IKEv1 informational exchange packets which are encrypted and integrity protected using the established IKE SA encryption and integrity keys, but as a receiver, the integrity check value was not verified. This issue affects versions before 3.29.
The Libreswan Project has found a vulnerability in the processing of I ...
The Libreswan Project has found a vulnerability in the processing of IKEv1 informational exchange packets which are encrypted and integrity protected using the established IKE SA encryption and integrity keys, but as a receiver, the integrity check value was not verified. This issue affects versions before 3.29.
ELSA-2019-3391: libreswan security and bug fix update (LOW)
EPSS
3.5 Low
CVSS2
3.1 Low
CVSS3