Known vulnerabilities in libreswan

Software: libreswan
Software CPE: cpe:2.3:a:libreswan.org:libreswan:*:*:*:*:*:*:*:*
Total vulnerabilities: 23
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting libreswan libreswan is affected by 23 known vulnerabilities: 1 high, 19 medium, 3 low Critical High Medium Low

Vulnerabilities (23)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU138388 - NULL Pointer Dereference
CVE-2026-14957
CWE-476 Medium
No
No
5.3.2 18.07.2026 SB2026071802
SB2026071803
SB2026071804
and 9 more
#VU135210 - Improper input validation
CVE-2026-50722
CWE-20 Medium
No
No
5.3.1 25.06.2026 SB2026062560
SB2026070973
SB2026070974
and 12 more
#VU135209 - Improper input validation
CVE-2026-50721
CWE-20 Medium
No
No
5.3.1 25.06.2026 SB2026062560
SB2026070973
SB2026070974
and 12 more
#VU135208 - Reachable Assertion
CVE-2026-12413
CWE-617 Medium
No
No
5.3.1 25.06.2026 SB2026062560
SB2026070973
SB2026070974
and 12 more
#VU88534 - Reachable Assertion
CVE-2024-3652
CWE-617 Low
No
No
4.15 15.04.2024 SB2024041540
SB2024051090
SB2024062201
and 18 more
#VU87342 - Error Handling
CVE-2024-2357
CWE-388 Low
No
No
4.13 12.03.2024 SB2024031220
SB2024031221
SB2024031222
and 16 more
#VU79140 - Improper input validation
CVE-2023-38712
CWE-20 Medium
No
No
4.12 08.08.2023 SB2023080858
SB20230821197
SB20230821198
and 10 more
#VU79139 - NULL Pointer Dereference
CVE-2023-38711
CWE-476 Medium
No
No
4.12 08.08.2023 SB2023080858
SB20230821197
SB20230821198
and 10 more
#VU79138 - Reachable Assertion
CVE-2023-38710
CWE-617 Medium
No
No
4.12 08.08.2023 SB2023080858
SB20230821197
SB20230821198
and 10 more
#VU75709 - Improper input validation
CVE-2023-30570
CWE-20 Medium
No
No
4.11 04.05.2023 SB2023050401
SB2023050447
SB2023050448
and 14 more
#VU72679 - Reachable Assertion
CVE-2023-23009
CWE-617 Medium
No
No
4.10 01.03.2023 SB2023030121
SB2023030401
SB2023050930
and 6 more
#VU59521 - NULL Pointer Dereference
CVE-2022-23094
CWE-476 Medium
No
No
4.6 12.01.2022 SB2022011205
SB2022011729
SB2022012029
and 6 more
#VU27711 - NULL Pointer Dereference
CVE-2019-12312
CWE-476 Medium
No
No
3.28 12.05.2020 SB2019052408
SB2019082065
#VU27710 - Insufficient Verification of Data Authenticity
CVE-2019-10155
CWE-345 Low
No
No
3.29 12.05.2020 SB2019061214
SB2019082064
SB2019110675
and 2 more
#VU27709 - Improper input validation
CVE-2020-1763
CWE-20 Medium
No
No
3.32 12.05.2020 SB2020051214
SB2020051215
SB2020051216
and 5 more
#VU40342 - Improper input validation
CVE-2016-3071
CWE-20 Medium
No
No
- 18.04.2016 SB2016041802
SB2016040709
SB2016040710
and 1 more
#VU40606 - Improper input validation
CVE-2015-3240
CWE-20 Medium
No
No
- 09.11.2015 SB2015110912
SB2016031221
SB2015082512
#VU40705 - Improper input validation
CVE-2015-3204
CWE-20 Medium
No
No
- 01.07.2015 SB2015070102
SB2016031221
SB2015060110
and 2 more
#VU42149 - Improper input validation
CVE-2013-7294
CWE-20 Medium
No
No
- 16.01.2014 SB2014011603
#VU42179 - Improper input validation
CVE-2013-4564
CWE-20 Medium
No
No
- 07.01.2014 SB2014010704
SB2013121106


Showing elements 1 - 20 out of 23