The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2024:1998 advisory.

  - The Libreswan Project was notified of an issue causing libreswan to restart under some IKEv2 retransmit     scenarios when a connection is configured to use PreSharedKeys (authby=secret) and the connection cannot     find a matching configured secret. When such a connection is automatically added on startup using the     auto= keyword, it can cause repeated crashes leading to a Denial of Service. (CVE-2024-2357)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

AlmaLinux 8 : libreswan (ALSA-2024:1998)

medium Nessus Plugin ID 194445

Version 1.0