VDB
DEBIAN-CVE-2024-2357
DEBIAN-CVE-2024-2357
PUBLISHED
CVSS 6.5 MEDIUM
The Libreswan Project was notified of an issue causing libreswan to restart under some IKEv2 retransmit scenarios when a connection is configured to use PreSharedKeys (authby=secret) and the connection cannot find a matching configured secret. When such a connection is automatically added on startup using the auto= keyword, it can cause repeated crashes leading to a Denial of Service.
Risk Scores
CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:13 | libreswan | 0, 0 |
| Debian:12 | libreswan | 4.10-2, 4.10-2+deb12u1, 4.11-1 |
| Debian:14 | libreswan | 0, 0 |
| Debian:11 | libreswan | 4.3-1, 4.5-1, 4.5-2 |
Timeline
- Mar 11, 2024 CVE Published
- Apr 28, 2026 CVE Updated