According to the versions of the libreswan package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - The Libreswan Project has found a vulnerability in the processing of IKEv1 informational exchange packets     which are encrypted and integrity protected using the established IKE SA encryption and integrity keys,     but as a receiver, the integrity check value was not verified. This issue affects versions before 3.29.
    (CVE-2019-10155)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2019:3391 advisory.

  - libreswan: vulnerability in the processing of IKEv1 informational packets due to missing integrity check     (CVE-2019-10155)

  - libreswan: null-pointer dereference by sending two IKEv2 packets (CVE-2019-12312)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the version of the libreswan package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - The Libreswan Project has found a vulnerability in the     processing of IKEv1 informational exchange packets     which are encrypted and integrity protected using the     established IKE SA encryption and integrity keys, but     as a receiver, the integrity check value was not     verified. This issue affects versions before     3.29.(CVE-2019-10155)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - libreswan: vulnerability in the processing of IKEv1 informational packets due to missing integrity check     (CVE-2019-10155)

  - libreswan: Invalid IKEv1 repeat IKE SA delete causes crash and restart (CVE-2023-38712)

  - An issue was discovered in Libreswan before 4.12. When an IKEv2 Child SA REKEY packet contains an invalid     IPsec protocol ID number of 0 or 1, an error notify INVALID_SPI is sent back. The notify payload's     protocol ID is copied from the incoming packet, but the code that verifies outgoing packets fails an     assertion that the protocol ID must be ESP (2) or AH(3) and causes the pluto daemon to crash and restart.
    NOTE: the earliest affected version is 3.20. (CVE-2023-38710)

  - The Libreswan Project was notified of an issue causing libreswan to restart under some IKEv2 retransmit     scenarios when a connection is configured to use PreSharedKeys (authby=secret) and the connection cannot     find a matching configured secret. When such a connection is automatically added on startup using the     auto= keyword, it can cause repeated crashes leading to a Denial of Service. (CVE-2024-2357)

  - The Libreswan Project was notified of an issue causing libreswan to restart when using IKEv1 without     specifying an esp= line. When the peer requests AES-GMAC, libreswan's default proposal handler causes an     assertion failure and crashes and restarts. IKEv2 connections are not affected. (CVE-2024-3652)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

Resolves: rhbz#1718986 Updated to 3.29 for CVE-2019-10155

----

Updated to 3.28 (many imported bugfixes)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2019-3391 advisory.

  - The Libreswan Project has found a vulnerability in the processing of IKEv1 informational exchange packets     which are encrypted and integrity protected using the established IKE SA encryption and integrity keys,     but as a receiver, the integrity check value was not verified. This issue affects versions before 3.29.
    (CVE-2019-10155)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - libreswan: vulnerability in the processing of IKEv1 informational packets due to missing integrity check     (CVE-2019-10155)

  - libreswan: Malicious IKEv1 Aggressive Mode packets can crash libreswan (CVE-2023-30570)

  - An issue was discovered in Libreswan 3.x and 4.x before 4.12. When an IKEv1 ISAKMP SA Informational     Exchange packet contains a Delete/Notify payload followed by further Notifies that act on the ISAKMP SA,     such as a duplicated Delete/Notify message, a NULL pointer dereference on the deleted state causes the     pluto daemon to crash and restart. (CVE-2023-38712)

  - The Libreswan Project was notified of an issue causing libreswan to restart under some IKEv2 retransmit     scenarios when a connection is configured to use PreSharedKeys (authby=secret) and the connection cannot     find a matching configured secret. When such a connection is automatically added on startup using the     auto= keyword, it can cause repeated crashes leading to a Denial of Service. (CVE-2024-2357)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:3391 advisory.

  - libreswan: vulnerability in the processing of IKEv1 informational packets due to missing integrity check     (CVE-2019-10155)

  - libreswan: null-pointer dereference by sending two IKEv2 packets (CVE-2019-12312)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - libreswan: vulnerability in the processing of IKEv1 informational packets due to missing integrity check     (CVE-2019-10155)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

ID	Name	Product	Family	Published	Updated	Severity
160129	EulerOS 2.0 SP5 : libreswan (EulerOS-SA-2022-1539)	Nessus	Huawei Local Security Checks	4/25/2022	4/25/2022	low
145635	CentOS 8 : libreswan (CESA-2019:3391)	Nessus	CentOS Local Security Checks	1/29/2021	1/25/2024	high
142200	EulerOS 2.0 SP8 : libreswan (EulerOS-SA-2020-2312)	Nessus	Huawei Local Security Checks	11/2/2020	2/12/2024	low
196692	RHEL 7 : libreswan (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	5/11/2024	5/11/2024	medium
125869	Fedora 30 : libreswan (2019-f7fb531958)	Nessus	Fedora Local Security Checks	6/13/2019	5/16/2024	low
180828	Oracle Linux 8 : libreswan (ELSA-2019-3391)	Nessus	Oracle Linux Local Security Checks	9/7/2023	9/7/2023	low
161523	EulerOS 2.0 SP3 : libreswan (EulerOS-SA-2022-1738)	Nessus	Huawei Local Security Checks	5/26/2022	5/26/2022	low
196662	RHEL 6 : libreswan (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	5/11/2024	5/11/2024	high
130534	RHEL 8 : libreswan (RHSA-2019:3391)	Nessus	Red Hat Local Security Checks	11/6/2019	4/28/2024	high
126014	Fedora 29 : libreswan (2019-1bd9cfb718)	Nessus	Fedora Local Security Checks	6/19/2019	5/15/2024	low
196711	RHEL 5 : libreswan (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	5/11/2024	5/11/2024	low

Detections

Analytics

Plugins Search

low

high

low

medium

low

low

low

high

high

low

low