Libreswan 3.6 allows remote attackers to cause a denial of service (crash) via a small length value and (1) no version or (2) an invalid major number in an IKE packet.

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0084 advisory.

    This advisory aggregates security fixes for the libreswan SRPM in CIQ LTS 8.6. It addresses 8 CVEs:
    CVE-2016-3071, CVE-2013-2052, CVE-2024-2357, CVE-2013-4564, CVE-2015-3240, and 3 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_1471 advisory.

    This advisory aggregates security fixes for the libreswan SRPM in CIQ LTS 9.6. It addresses 21 CVEs:
    CVE-2024-3652, CVE-2023-2295, CVE-2023-23009, CVE-2024-2357, CVE-2023-30570, and 16 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0449 advisory.

    This advisory aggregates security fixes for the libreswan SRPM in CIQ LTS 9.2. It addresses 25 CVEs:
    CVE-2023-2455, CVE-2016-3071, CVE-2022-2625, CVE-2023-23009, CVE-2013-2052, and 20 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 6.06, has libreswan packages installed that are affected by multiple vulnerabilities:

  - pluto in Libreswan before 4.11 allows a denial of service (responder SPI mishandling and daemon crash) via     unauthenticated IKEv1 Aggressive Mode packets. The earliest affected version is 3.28. (CVE-2023-30570)

  - Buffer overflow in the atodn function in libreswan 3.0 and 3.1, when Opportunistic Encryption is enabled     and an RSA key is being used, allows remote attackers to cause a denial of service (pluto IKE daemon     crash) and possibly execute arbitrary code via crafted DNS TXT records. NOTE: this might be the same     vulnerability as CVE-2013-2053 and CVE-2013-2054. (CVE-2013-2052)

  - Libreswan 3.6 allows remote attackers to cause a denial of service (crash) via a small length value and     (1) no version or (2) an invalid major number in an IKE packet. (CVE-2013-4564)

  - Libreswan 3.7 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference     and IKE daemon restart) via IKEv2 packets that lack expected payloads. (CVE-2013-6467)

  - libreswan 3.9 through 3.12 allows remote attackers to cause a denial of service (daemon restart) via an     IKEv1 packet with (1) unassigned bits set in the IPSEC DOI value or (2) the next payload value set to     ISAKMP_NEXT_SAK. (CVE-2015-3204)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Security fix for CVE-2013-4564, extended AES-GCM and AES-CCM support Improved Cisco interop, IKEv2 improvements, bugfixes

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fix for CVE-2013-4564, extended AES-GCM and AES-CCM Improved Cisco interop, IKEv2 improvements, bugfixes

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fix for CVE-2013-4564, extended AES-GCM and AES-CCM

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Type	Severity
359006	Rocky Linux 8.6 [CIQ] Security Update: libreswan / libreswan-debuginfo / libreswan-debugsource Multiple Vulnerabilities (ciqsa-2026_0084)	Nessus	Rocky Linux Local Security Checks	Local	high
357229	Rocky Linux 9.6 [CIQ] Security Update: libreswan / libreswan-debuginfo / libreswan-debugsource Multiple Vulnerabilities (ciqsa-2026_1471)	Nessus	Rocky Linux Local Security Checks	Local	high
354558	Rocky Linux 9.2 [CIQ] Security Update: libreswan / libreswan-debuginfo / libreswan-debugsource Multiple Vulnerabilities (ciqsa-2026_0449)	Nessus	Rocky Linux Local Security Checks	Local	high
323228	NewStart CGSL MAIN 6.06 : libreswan Multiple Vulnerabilities (NS-SA-2025-0243)	Nessus	NewStart CGSL Local Security Checks	Local	high
71592	Fedora 19 : libreswan-3.7-1.fc19 (2013-23315)	Nessus	Fedora Local Security Checks	Local	medium
71591	Fedora 18 : libreswan-3.7-1.fc18 (2013-23299)	Nessus	Fedora Local Security Checks	Local	medium
71589	Fedora 20 : libreswan-3.7-1.fc20 (2013-23250)	Nessus	Fedora Local Security Checks	Local	medium

Detections

Analytics

CVE-2013-4564

high

Tenable Plugins

high

high

high

high

medium

medium

medium