Known vulnerabilities in libreswan
Vendor:
Fedoraproject
Software:
libreswan
Software CPE:
cpe:2.3:o:fedoraproject:libreswan:*:*:*:*:*:fedora:*:*
Website:
https://getfedora.org/
Total vulnerabilities:
16
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
5.3.2-2.fc43
5.3.2-2.fc44
3.29-1.fc30
3.29-1.fc29
3.18-1.fc23
3.18-1.fc24
3.17-1.fc22
3.17-1.fc23
3.17-1.fc24
3.15-1.fc21
3.13-1.el6
3.13-1.fc22
3.13-1.fc21
3.8-1.el6
3.7-1.el6
4.6-1.fc34
4.6-1.fc35
4.15-1.fc39
4.15-1.fc40
4.15-2.fc41
4.14-1.fc38
4.14-1.fc39
4.14-1.fc40
4.12-1.fc38
4.12-1.fc37
4.11-1.fc36
4.11-1.fc37
4.11-1.fc38
4.10-1.fc37
4.10-1.fc38
Vulnerabilities (16)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU138388 - NULL Pointer Dereference CVE-2026-14957 |
CWE-476 | Medium | 5.3.2-2.fc43, 5.3.2-2.fc44 | 18.07.2026 |
SB2026071802 SB2026071803 SB2026071804 and 9 more |
||
| #VU88534 - Reachable Assertion CVE-2024-3652 |
CWE-617 | Low | 4.15-1.fc39, 4.15-1.fc40, 4.15-2.fc41 | 15.04.2024 |
SB2024041540 SB2024051090 SB2024062201 and 18 more |
||
| #VU87342 - Error Handling CVE-2024-2357 |
CWE-388 | Low | 4.14-1.fc38, 4.14-1.fc39, 4.14-1.fc40 | 12.03.2024 |
SB2024031220 SB2024031221 SB2024031222 and 16 more |
||
| #VU79140 - Improper input validation CVE-2023-38712 |
CWE-20 | Medium | 4.12-1.fc37, 4.12-1.fc38 | 08.08.2023 |
SB2023080858 SB20230821197 SB20230821198 and 10 more |
||
| #VU79139 - NULL Pointer Dereference CVE-2023-38711 |
CWE-476 | Medium | 4.12-1.fc37, 4.12-1.fc38 | 08.08.2023 |
SB2023080858 SB20230821197 SB20230821198 and 10 more |
||
| #VU79138 - Reachable Assertion CVE-2023-38710 |
CWE-617 | Medium | 4.12-1.fc37, 4.12-1.fc38 | 08.08.2023 |
SB2023080858 SB20230821197 SB20230821198 and 10 more |
||
| #VU75709 - Improper input validation CVE-2023-30570 |
CWE-20 | Medium | 4.11-1.fc36, 4.11-1.fc37, 4.11-1.fc38 | 04.05.2023 |
SB2023050401 SB2023050447 SB2023050448 and 14 more |
||
| #VU72679 - Reachable Assertion CVE-2023-23009 |
CWE-617 | Medium | 4.10-1.fc37, 4.10-1.fc38 | 01.03.2023 |
SB2023030121 SB2023030401 SB2023050930 and 6 more |
||
| #VU59521 - NULL Pointer Dereference CVE-2022-23094 |
CWE-476 | Medium | 4.6-1.fc34, 4.6-1.fc35 | 12.01.2022 |
SB2022011205 SB2022011729 SB2022012029 and 6 more |
||
| #VU27710 - Insufficient Verification of Data Authenticity CVE-2019-10155 |
CWE-345 | Low | 3.29-1.fc29, 3.29-1.fc30 | 12.05.2020 |
SB2019061214 SB2019082064 SB2019110675 and 2 more |
||
| #VU38872 - NULL Pointer Dereference CVE-2016-5391 |
CWE-476 | Medium | 3.18-1.fc23, 3.18-1.fc24 | 13.06.2017 |
SB2017061385 SB2016072909 SB2016072910 |
||
| #VU40342 - Improper input validation CVE-2016-3071 |
CWE-20 | Medium | 3.17-1.fc22, 3.17-1.fc23, 3.17-1.fc24 | 18.04.2016 |
SB2016041802 SB2016040709 SB2016040710 and 1 more |
||
| #VU40606 - Improper input validation CVE-2015-3240 |
CWE-20 | Medium | 3.15-1.fc21 | 09.11.2015 |
SB2015110912 SB2016031221 SB2015082512 |
||
| #VU40705 - Improper input validation CVE-2015-3204 |
CWE-20 | Medium | 3.13-1.el6, 3.13-1.fc21, 3.13-1.fc22 | 01.07.2015 |
SB2015070102 SB2016031221 SB2015060110 and 2 more |
||
| #VU42103 - Improper input validation CVE-2013-6467 |
CWE-20 | Medium | 3.8-1.el6 | 26.01.2014 |
SB2014010704 SB2014011803 |
||
| #VU42179 - Improper input validation CVE-2013-4564 |
CWE-20 | Medium | 3.7-1.el6 | 07.01.2014 |
SB2014010704 SB2013121106 |