Lucene search
D42dc95b-23f1-4e06-9076-20753a0fb0dfNVD:CVE-2024-2357HistoryMar 11, 2024 - 8:15 p.m.
CVE-2024-2357
2024-03-1120:15:07
d42dc95b-23f1-4e06-9076-20753a0fb0df
web.nvd.nist.gov
6
libreswan
restart
issue
missing secret
denial of service
The Libreswan Project was notified of an issue causing libreswan to restart under some IKEv2 retransmit scenarios when a connection is configured to use PreSharedKeys (authby=secret) and the connection cannot find a matching configured secret. When such a connection is automatically added on startup using the auto= keyword, it can cause repeated crashes leading to a Denial of Service.
References
libreswan.org/security/CVE-2024-2357
lists.fedoraproject.org/archives/list/[email protected]/message/EJZJYFHKBIJ4ZK5GAWWFFR3AKJS6O5JX/
lists.fedoraproject.org/archives/list/[email protected]/message/HEM46ALKF7NG6CAUKZ7KQERVOHWQIQKY/
lists.fedoraproject.org/archives/list/[email protected]/message/TVQ7MZY6LFFGRWAJNTKKN2VSEFS2VPAR/
Related
osv
osv
Moderate: libreswan security and bug fix update
2024-04-24 00:00:00
Moderate: libreswan security update
2024-04-23 00:00:00
Moderate: libreswan security update
2024-05-10 14:32:42
rocky
rocky
libreswan security update
2024-05-06 13:04:21
libreswan bug fix and enhancement update
2024-06-14 13:59:30
libreswan security update
2024-05-10 14:32:42
redhat
redhat
(RHSA-2024:2085) Moderate: libreswan security and bug fix update
2024-04-29 01:07:51
(RHSA-2024:2082) Moderate: libreswan security update
2024-04-29 01:07:46
(RHSA-2024:2565) Moderate: libreswan security update
2024-04-30 11:38:53
oraclelinux
oraclelinux
libreswan security update
2024-05-07 00:00:00
libreswan security update
2024-04-23 00:00:00
libreswan security and bug fix update
2024-04-24 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2024-0113)
2024-04-09 00:00:00
Fedora: Security Advisory (FEDORA-2024-312a5ed3d5)
2024-03-25 00:00:00
Fedora: Security Advisory for libreswan (FEDORA-2024-1439ec2069)
2024-03-25 00:00:00
nessus
nessus
Rocky Linux 9 : libreswan (RLSA-2024:2565)
2024-05-14 00:00:00
Amazon Linux 2023 : libreswan (ALAS2023-2024-587)
2024-04-17 00:00:00
RHEL 9 : libreswan (RHSA-2024:2033)
2024-04-24 00:00:00
debiancve
debiancve
CVE-2024-2357
2024-03-11 20:15:07
fedora
fedora
[SECURITY] Fedora 38 Update: libreswan-4.14-1.fc38
2024-03-21 01:28:26
[SECURITY] Fedora 39 Update: libreswan-4.14-1.fc39
2024-03-21 01:13:33
[SECURITY] Fedora 40 Update: libreswan-4.14-1.fc40
2024-03-23 00:51:20
veracode
veracode
Denial Of Service (DOS)
2024-03-16 23:59:27
almalinux
almalinux
Moderate: libreswan security update
2024-04-30 00:00:00
Moderate: libreswan security and bug fix update
2024-04-24 00:00:00
Moderate: libreswan security update
2024-04-23 00:00:00
mageia
mageia
Updated libreswan packages fix security vulnerabilities
2024-04-07 01:16:44
alpinelinux
alpinelinux
CVE-2024-2357
2024-03-11 20:15:07
vulnrichment
vulnrichment
redos
redos
ROS-20240423-04
2024-04-23 00:00:00
redhatcve
redhatcve
CVE-2024-2357
2024-03-14 16:45:16
ubuntucve
ubuntucve
CVE-2024-2357
2024-03-11 00:00:00
cvelist
cvelist
cve
cve
CVE-2024-2357
2024-03-11 20:15:07
ibm
ibm
Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities
2024-07-31 12:54:26