The Libreswan Project has found a vulnerability in the processing of IKEv1 informational exchange packets which are encrypted and integrity protected using the established IKE SA encryption and integrity keys, but as a receiver, the integrity check value was not verified. This issue affects versions before 3.29.

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2019-3391 advisory.

    [3.29-6.0.1]
    - Add libreswan-oracle.patch to detect Oracle Linux distro

    [3.29-6]
    - Resolves: rhbz#1714331 support NSS based IKE KDFs [require updated nss for rhbz 1738689, memleak fix]

    [3.29-5]
    - Resolves: rhbz#1714331 support NSS based IKE KDFs so libreswan does not need FIPS certification

    [3.29-4]
    - Resolves: rhbz#1699318 'ipsec show' has python3 invalid syntax

    [3.29-3]
    - Resolves: rhbz#1725205 XFRM policy for OE/32 peer is deleted when shunts for previous half-open state     expire

    [3.29-2]
    - Resolves: rhbz#1723957 libreswan is missing linux audit calls for failed IKE SAs and failed IPsec SAs     required for Common Criteria

    [3.29-1]
    - Resolves: rhbz#1712555 libreswan rebase to 3.29

    [3.28-2]
    - Resolves: rhbz#1713734: barf: shell syntax error in barf diagnostic tool

    [3.28-1]
    - Resolves: rhbz#1712555 libreswan rebase to 3.28
    - Resolves: rhbz#1683706 Libreswan shows incorrect error messages
    - Resolves: rhbz#1706180 Remove last usage of old (unused) PF_KEY API
    - Resolves: rhbz#1677045 Opportunistic IPsec instances of /32 groups or auto=start that receive delete     wont restart
    - Resolves: rhbz#1686990 IKEv1 traffic interruption when responder deletes SAs 60 seconds before     EVENT_SA_REPLACE
    - Resolves: rhbz#1608353 /usr/sbin/ipsec part of the libreswan packages still invokes commands that were     deprecated a decade ago
    - Resolves: rhbz#1699318 'ipsec show' has python3 invalid syntax
    - Resolves: rhbz#1679394 libreswan using NSS IPsec profiles regresses when critical flags are set causing     validation failure

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the libreswan package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - The Libreswan Project has found a vulnerability in the processing of IKEv1 informational exchange packets     which are encrypted and integrity protected using the established IKE SA encryption and integrity keys,     but as a receiver, the integrity check value was not verified. This issue affects versions before 3.29.
    (CVE-2019-10155)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2019:3391 advisory.

  - libreswan: vulnerability in the processing of IKEv1 informational packets due to missing integrity check     (CVE-2019-10155)

  - libreswan: null-pointer dereference by sending two IKEv2 packets (CVE-2019-12312)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the version of the libreswan package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - The Libreswan Project has found a vulnerability in the     processing of IKEv1 informational exchange packets     which are encrypted and integrity protected using the     established IKE SA encryption and integrity keys, but     as a receiver, the integrity check value was not     verified. This issue affects versions before     3.29.(CVE-2019-10155)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:3391 advisory.

  - libreswan: vulnerability in the processing of IKEv1 informational packets due to missing integrity check     (CVE-2019-10155)

  - libreswan: null-pointer dereference by sending two IKEv2 packets (CVE-2019-12312)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Resolves: rhbz#1718986 Updated to 3.29 for CVE-2019-10155

----

Updated to 3.28 (many imported bugfixes)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
180828	Oracle Linux 8 : libreswan (ELSA-2019-3391)	Nessus	Oracle Linux Local Security Checks	low
161523	EulerOS 2.0 SP3 : libreswan (EulerOS-SA-2022-1738)	Nessus	Huawei Local Security Checks	low
160129	EulerOS 2.0 SP5 : libreswan (EulerOS-SA-2022-1539)	Nessus	Huawei Local Security Checks	low
145635	CentOS 8 : libreswan (CESA-2019:3391)	Nessus	CentOS Local Security Checks	high
142200	EulerOS 2.0 SP8 : libreswan (EulerOS-SA-2020-2312)	Nessus	Huawei Local Security Checks	low
130534	RHEL 8 : libreswan (RHSA-2019:3391)	Nessus	Red Hat Local Security Checks	high
126014	Fedora 29 : libreswan (2019-1bd9cfb718)	Nessus	Fedora Local Security Checks	low
125869	Fedora 30 : libreswan (2019-f7fb531958)	Nessus	Fedora Local Security Checks	low

Detections

Analytics

CVE-2019-10155

low

Tenable Plugins

low

low

low

high

low

high

low

low