The Libreswan Project was notified of an issue causing libreswan to restart under some IKEv2 retransmit scenarios when a connection is configured to use PreSharedKeys (authby=secret) and the connection cannot find a matching configured secret. When such a connection is automatically added on startup using the auto= keyword, it can cause repeated crashes leading to a Denial of Service.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:10594 advisory.

    Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and     uses strong cryptography to provide both authentication and encryption services. These services allow you     to build secure tunnels through untrusted networks such as virtual private network (VPN).

    Security Fix(es):

    * libreswan: remote DoS via crafted TS payload with an incorrect selector length (CVE-2023-23009)

    * libreswan: Invalid IKEv1 Quick Mode ID causes restart (CVE-2023-38711)

    * libreswan: Invalid IKEv2 REKEY proposal causes restart (CVE-2023-38710)

    * libreswan: Invalid IKEv1 repeat IKE SA delete causes crash and restart (CVE-2023-38712)

    * libreswan: Missing PreSharedKey for connection can cause crash (CVE-2024-2357)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:2565 advisory.

  - The Libreswan Project was notified of an issue causing libreswan to restart under some IKEv2 retransmit     scenarios when a connection is configured to use PreSharedKeys (authby=secret) and the connection cannot     find a matching configured secret. When such a connection is automatically added on startup using the     auto= keyword, it can cause repeated crashes leading to a Denial of Service. (CVE-2024-2357)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2024-2565 advisory.

    - Fix CVE-2024-2357 (RHEL-32761)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:1998 advisory.

  - The Libreswan Project was notified of an issue causing libreswan to restart under some IKEv2 retransmit     scenarios when a connection is configured to use PreSharedKeys (authby=secret) and the connection cannot     find a matching configured secret. When such a connection is automatically added on startup using the     auto= keyword, it can cause repeated crashes leading to a Denial of Service. (CVE-2024-2357)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:2085 advisory.

    Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and     uses strong cryptography to provide both authentication and encryption services. These services allow you     to build secure tunnels through untrusted networks such as virtual private network (VPN).

    Security Fix(es):

    * libreswan: Missing PreSharedKey for connection can cause crash (CVE-2024-2357)

    Bug Fix(es):

    * Connection cannot be established when IPv6 IP SAN is used (JIRA:RHEL-33350)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:2081 advisory.

    Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and     uses strong cryptography to provide both authentication and encryption services. These services allow you     to build secure tunnels through untrusted networks such as virtual private network (VPN).

    Security Fix(es):

    * libreswan: Missing PreSharedKey for connection can cause crash (CVE-2024-2357)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References     section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:2082 advisory.

    Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and     uses strong cryptography to provide both authentication and encryption services. These services allow you     to build secure tunnels through untrusted networks such as virtual private network (VPN).

    Security Fix(es):

    * libreswan: Missing PreSharedKey for connection can cause crash (CVE-2024-2357)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References     section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:2565 advisory.

    Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and     uses strong cryptography to provide both authentication and encryption services. These services allow you     to build secure tunnels through untrusted networks such as virtual private network (VPN).

    Security Fix(es):

    * libreswan: Missing PreSharedKey for connection can cause crash (CVE-2024-2357)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-92f0c71a01 advisory.

    Update to 4.14 for CVE-2024-2357, v6 SAN name and TFC padding fix for AEAD

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2024:1998 advisory.

  - The Libreswan Project was notified of an issue causing libreswan to restart under some IKEv2 retransmit     scenarios when a connection is configured to use PreSharedKeys (authby=secret) and the connection cannot     find a matching configured secret. When such a connection is automatically added on startup using the     auto= keyword, it can cause repeated crashes leading to a Denial of Service. (CVE-2024-2357)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2024:2033 advisory.

  - The Libreswan Project was notified of an issue causing libreswan to restart under some IKEv2 retransmit     scenarios when a connection is configured to use PreSharedKeys (authby=secret) and the connection cannot     find a matching configured secret. When such a connection is automatically added on startup using the     auto= keyword, it can cause repeated crashes leading to a Denial of Service. (CVE-2024-2357)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2024:1998 advisory.

  - The Libreswan Project was notified of an issue causing libreswan to restart under some IKEv2 retransmit     scenarios when a connection is configured to use PreSharedKeys (authby=secret) and the connection cannot     find a matching configured secret. When such a connection is automatically added on startup using the     auto= keyword, it can cause repeated crashes leading to a Denial of Service. (CVE-2024-2357)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2024-2033 advisory.

    - Fix CVE-2024-2357 (RHEL-29734)
    - Update to 4.12 to fix CVE-2023-38710, CVE-2023-38711, CVE-2023-38712
    - Just bumping up the version to include bugs for CVE-2023-2295. There is no       code fix for it. Fix for it is including the code fix for CVE-2023-30570.
    - Fix CVE-2023-2295 Regression of CVE-2023-30570 fixes in the       Red Hat Enterprise Linux
    - Fix CVE-2023-30570:Malicious IKEv1 Aggressive Mode packets can crash       libreswan
    - Fix CVE-2023-23009: remote DoS via crafted TS payload with an       incorrect selector length (rhbz#2173674)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:2033 advisory.

    Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and     uses strong cryptography to provide both authentication and encryption services. These services allow you     to build secure tunnels through untrusted networks such as virtual private network (VPN).

    Security Fix(es):

    * libreswan: Missing PreSharedKey for connection can cause crash (CVE-2024-2357)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2024-1998 advisory.

    [4.12-2.0.1.2]
    - Add libreswan-oracle.patch to detect Oracle Linux distro

    [4.12-2.2]
    - Fix patch application in the previous change

    [4.12-2.1]
    - Fix CVE-2024-2357 (RHEL-28742)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:1998 advisory.

    Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and     uses strong cryptography to provide both authentication and encryption services. These services allow you     to build secure tunnels through untrusted networks such as virtual private network (VPN).

    Security Fix(es):

    * libreswan: Missing PreSharedKey for connection can cause crash (CVE-2024-2357)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-587 advisory.

    The Libreswan Project was notified of an issue causing libreswan to restart under some IKEv2 retransmit     scenarios when a connection is configured to use PreSharedKeys (authby=secret) and the connection cannot     find a matching configured secret. When such a connection is automatically added on startup using the     auto= keyword, it can cause repeated crashes leading to a Denial of Service. (CVE-2024-2357)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-1439ec2069 advisory.

    Update to 4.14 for CVE-2024-2357, v6 SAN name and TFC padding fix for AEAD

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-312a5ed3d5 advisory.

    Update to 4.14 for CVE-2024-2357, v6 SAN name and TFC padding fix for AEAD

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
211987	RHEL 9 : libreswan (RHSA-2024:10594)	Nessus	Red Hat Local Security Checks	medium
196975	Rocky Linux 9 : libreswan (RLSA-2024:2565)	Nessus	Rocky Linux Local Security Checks	medium
195121	Oracle Linux 9 : libreswan (ELSA-2024-2565)	Nessus	Oracle Linux Local Security Checks	medium
195006	Rocky Linux 8 : libreswan (RLSA-2024:1998)	Nessus	Rocky Linux Local Security Checks	medium
194880	RHEL 9 : libreswan (RHSA-2024:2085)	Nessus	Red Hat Local Security Checks	medium
194878	RHEL 8 : libreswan (RHSA-2024:2081)	Nessus	Red Hat Local Security Checks	medium
194875	RHEL 8 : libreswan (RHSA-2024:2082)	Nessus	Red Hat Local Security Checks	medium
194824	RHEL 9 : libreswan (RHSA-2024:2565)	Nessus	Red Hat Local Security Checks	medium
194612	Fedora 40 : libreswan (2024-92f0c71a01)	Nessus	Fedora Local Security Checks	medium
194445	AlmaLinux 8 : libreswan (ALSA-2024:1998)	Nessus	Alma Linux Local Security Checks	medium
194444	AlmaLinux 9 : libreswan (ALSA-2024:2033)	Nessus	Alma Linux Local Security Checks	medium
193960	CentOS 8 : libreswan (CESA-2024:1998)	Nessus	CentOS Local Security Checks	medium
193812	Oracle Linux 9 : libreswan (ELSA-2024-2033)	Nessus	Oracle Linux Local Security Checks	medium
193810	RHEL 9 : libreswan (RHSA-2024:2033)	Nessus	Red Hat Local Security Checks	medium
193781	Oracle Linux 8 : libreswan (ELSA-2024-1998)	Nessus	Oracle Linux Local Security Checks	medium
193776	RHEL 8 : libreswan (RHSA-2024:1998)	Nessus	Red Hat Local Security Checks	medium
193438	Amazon Linux 2023 : libreswan (ALAS2023-2024-587)	Nessus	Amazon Linux Local Security Checks	medium
192328	Fedora 38 : libreswan (2024-1439ec2069)	Nessus	Fedora Local Security Checks	medium
192325	Fedora 39 : libreswan (2024-312a5ed3d5)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2024-2357

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium