The Libreswan Project was notified of an issue causing libreswan to restart under some IKEv2 retransmit scenarios when a connection is configured to use PreSharedKeys (authby=secret) and the connection cannot find a matching configured secret. When such a connection is automatically added on startup using the auto= keyword, it can cause repeated crashes leading to a Denial of Service.

The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:2565 advisory.

  - The Libreswan Project was notified of an issue causing libreswan to restart under some IKEv2 retransmit     scenarios when a connection is configured to use PreSharedKeys (authby=secret) and the connection cannot     find a matching configured secret. When such a connection is automatically added on startup using the     auto= keyword, it can cause repeated crashes leading to a Denial of Service. (CVE-2024-2357)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2024-2565 advisory.

  - The Libreswan Project was notified of an issue causing libreswan to restart under some IKEv2 retransmit     scenarios when a connection is configured to use PreSharedKeys (authby=secret) and the connection cannot     find a matching configured secret. When such a connection is automatically added on startup using the     auto= keyword, it can cause repeated crashes leading to a Denial of Service. (CVE-2024-2357)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:1998 advisory.

  - The Libreswan Project was notified of an issue causing libreswan to restart under some IKEv2 retransmit     scenarios when a connection is configured to use PreSharedKeys (authby=secret) and the connection cannot     find a matching configured secret. When such a connection is automatically added on startup using the     auto= keyword, it can cause repeated crashes leading to a Denial of Service. (CVE-2024-2357)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:2085 advisory.

    Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and     uses strong cryptography to provide both authentication and encryption services. These services allow you     to build secure tunnels through untrusted networks such as virtual private network (VPN).

    Security Fix(es):

    * libreswan: Missing PreSharedKey for connection can cause crash (CVE-2024-2357)

    Bug Fix(es):

    * Connection cannot be established when IPv6 IP SAN is used (JIRA:RHEL-33350)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:2081 advisory.

    Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and     uses strong cryptography to provide both authentication and encryption services. These services allow you     to build secure tunnels through untrusted networks such as virtual private network (VPN).

    Security Fix(es):

    * libreswan: Missing PreSharedKey for connection can cause crash (CVE-2024-2357)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References     section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:2082 advisory.

    Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and     uses strong cryptography to provide both authentication and encryption services. These services allow you     to build secure tunnels through untrusted networks such as virtual private network (VPN).

    Security Fix(es):

    * libreswan: Missing PreSharedKey for connection can cause crash (CVE-2024-2357)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References     section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:2565 advisory.

    Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and     uses strong cryptography to provide both authentication and encryption services. These services allow you     to build secure tunnels through untrusted networks such as virtual private network (VPN).

    Security Fix(es):

    * libreswan: Missing PreSharedKey for connection can cause crash (CVE-2024-2357)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-92f0c71a01 advisory.

  - The Libreswan Project was notified of an issue causing libreswan to restart under some IKEv2 retransmit     scenarios when a connection is configured to use PreSharedKeys (authby=secret) and the connection cannot     find a matching configured secret. When such a connection is automatically added on startup using the     auto= keyword, it can cause repeated crashes leading to a Denial of Service. (CVE-2024-2357)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2024:1998 advisory.

  - The Libreswan Project was notified of an issue causing libreswan to restart under some IKEv2 retransmit     scenarios when a connection is configured to use PreSharedKeys (authby=secret) and the connection cannot     find a matching configured secret. When such a connection is automatically added on startup using the     auto= keyword, it can cause repeated crashes leading to a Denial of Service. (CVE-2024-2357)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2024:2033 advisory.

  - The Libreswan Project was notified of an issue causing libreswan to restart under some IKEv2 retransmit     scenarios when a connection is configured to use PreSharedKeys (authby=secret) and the connection cannot     find a matching configured secret. When such a connection is automatically added on startup using the     auto= keyword, it can cause repeated crashes leading to a Denial of Service. (CVE-2024-2357)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2024:1998 advisory.

  - The Libreswan Project was notified of an issue causing libreswan to restart under some IKEv2 retransmit     scenarios when a connection is configured to use PreSharedKeys (authby=secret) and the connection cannot     find a matching configured secret. When such a connection is automatically added on startup using the     auto= keyword, it can cause repeated crashes leading to a Denial of Service. (CVE-2024-2357)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2024-2033 advisory.

  - The Libreswan Project was notified of an issue causing libreswan to restart under some IKEv2 retransmit     scenarios when a connection is configured to use PreSharedKeys (authby=secret) and the connection cannot     find a matching configured secret. When such a connection is automatically added on startup using the     auto= keyword, it can cause repeated crashes leading to a Denial of Service. (CVE-2024-2357)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:2033 advisory.

    Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and     uses strong cryptography to provide both authentication and encryption services. These services allow you     to build secure tunnels through untrusted networks such as virtual private network (VPN).

    Security Fix(es):

    * libreswan: Missing PreSharedKey for connection can cause crash (CVE-2024-2357)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2024-1998 advisory.

  - The Libreswan Project was notified of an issue causing libreswan to restart under some IKEv2 retransmit     scenarios when a connection is configured to use PreSharedKeys (authby=secret) and the connection cannot     find a matching configured secret. When such a connection is automatically added on startup using the     auto= keyword, it can cause repeated crashes leading to a Denial of Service. (CVE-2024-2357)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:1998 advisory.

    Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and     uses strong cryptography to provide both authentication and encryption services. These services allow you     to build secure tunnels through untrusted networks such as virtual private network (VPN).

    Security Fix(es):

    * libreswan: Missing PreSharedKey for connection can cause crash (CVE-2024-2357)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-587 advisory.

  - The Libreswan Project was notified of an issue causing libreswan to restart under some IKEv2 retransmit     scenarios when a connection is configured to use PreSharedKeys (authby=secret) and the connection cannot     find a matching configured secret. When such a connection is automatically added on startup using the     auto= keyword, it can cause repeated crashes leading to a Denial of Service. (CVE-2024-2357)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-1439ec2069 advisory.

  - The Libreswan Project was notified of an issue causing libreswan to restart under some IKEv2 retransmit     scenarios when a connection is configured to use PreSharedKeys (authby=secret) and the connection cannot     find a matching configured secret. When such a connection is automatically added on startup using the     auto= keyword, it can cause repeated crashes leading to a Denial of Service. (CVE-2024-2357)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-312a5ed3d5 advisory.

  - The Libreswan Project was notified of an issue causing libreswan to restart under some IKEv2 retransmit     scenarios when a connection is configured to use PreSharedKeys (authby=secret) and the connection cannot     find a matching configured secret. When such a connection is automatically added on startup using the     auto= keyword, it can cause repeated crashes leading to a Denial of Service. (CVE-2024-2357)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
196975	Rocky Linux 9 : libreswan (RLSA-2024:2565)	Nessus	Rocky Linux Local Security Checks	medium
195121	Oracle Linux 9 : libreswan (ELSA-2024-2565)	Nessus	Oracle Linux Local Security Checks	medium
195006	Rocky Linux 8 : libreswan (RLSA-2024:1998)	Nessus	Rocky Linux Local Security Checks	medium
194880	RHEL 9 : libreswan (RHSA-2024:2085)	Nessus	Red Hat Local Security Checks	medium
194878	RHEL 8 : libreswan (RHSA-2024:2081)	Nessus	Red Hat Local Security Checks	medium
194875	RHEL 8 : libreswan (RHSA-2024:2082)	Nessus	Red Hat Local Security Checks	medium
194824	RHEL 9 : libreswan (RHSA-2024:2565)	Nessus	Red Hat Local Security Checks	medium
194612	Fedora 40 : libreswan (2024-92f0c71a01)	Nessus	Fedora Local Security Checks	medium
194445	AlmaLinux 8 : libreswan (ALSA-2024:1998)	Nessus	Alma Linux Local Security Checks	medium
194444	AlmaLinux 9 : libreswan (ALSA-2024:2033)	Nessus	Alma Linux Local Security Checks	medium
193960	CentOS 8 : libreswan (CESA-2024:1998)	Nessus	CentOS Local Security Checks	medium
193812	Oracle Linux 9 : libreswan (ELSA-2024-2033)	Nessus	Oracle Linux Local Security Checks	medium
193810	RHEL 9 : libreswan (RHSA-2024:2033)	Nessus	Red Hat Local Security Checks	medium
193781	Oracle Linux 8 : libreswan (ELSA-2024-1998)	Nessus	Oracle Linux Local Security Checks	medium
193776	RHEL 8 : libreswan (RHSA-2024:1998)	Nessus	Red Hat Local Security Checks	medium
193438	Amazon Linux 2023 : libreswan (ALAS2023-2024-587)	Nessus	Amazon Linux Local Security Checks	high
192328	Fedora 38 : libreswan (2024-1439ec2069)	Nessus	Fedora Local Security Checks	high
192325	Fedora 39 : libreswan (2024-312a5ed3d5)	Nessus	Fedora Local Security Checks	high

Detections

Analytics

CVE-2024-2357

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

high

high

high