The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:2565 advisory.

  - The Libreswan Project was notified of an issue causing libreswan to restart under some IKEv2 retransmit     scenarios when a connection is configured to use PreSharedKeys (authby=secret) and the connection cannot     find a matching configured secret. When such a connection is automatically added on startup using the     auto= keyword, it can cause repeated crashes leading to a Denial of Service. (CVE-2024-2357)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

Rocky Linux 9 : libreswan (RLSA-2024:2565)

medium Nessus Plugin ID 196975

Version 1.0