Known vulnerabilities in libreswan (Red Hat package)
Vendor:
Red Hat Inc.
Software:
libreswan (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:libreswan_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
21
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
4.15-8.el9_6.1
5.3.2-1.el9fdp
5.3.2-1.el10_2
4.15-10.el9_8
4.12-2.el8_10.6
4.15-8.el9
5.2-1.el9fdp
4.9-5.el9_2.4
4.6-3.el9_0.3
4.5-1.el9
4.5-1.el8_6.3
4.12-2.el9_4.1
4.12-2.el9_4
4.9-5.el9_2.1
4.5-1.el8_6.2
4.9-3.el8_8.1
4.12-1.el9_3.1
4.12-2.el8_9.2
4.12-2.el8
4.12-1.el9
4.9-4.el9_2
4.9-2.el8_8.2
4.9-3.el8_8
4.9-2.el9_2
4.6-3.el9_1.1
4.6-3.el9_0.1
4.5-1.el8_7.1
4.5-1.el8_6.1
3.29-7.el8_2.2
4.3-6.el8_4.1
3.29-7.el8_1.2
4.3-6.el8_4
4.4-4.el8_5
3.27-10.el8_0
3.29-7.el8_2
3.29-7.el8_1
3.29-6.el8
3.12-10.1.el7_1
3.15-5.el7_1
3.15-8.el7
3.15-9.el6_10
3.15-5.el6
Vulnerabilities (21)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU138388 - NULL Pointer Dereference CVE-2026-14957 |
CWE-476 | Medium | 4.12-2.el8_10.6, 4.15-8.el9_6.1, 4.15-10.el9_8, 5.3.2-1.el9fdp, 5.3.2-1.el10_2 | 18.07.2026 |
SB2026071802 SB2026071803 SB2026071804 and 7 more |
||
| #VU135210 - Improper input validation CVE-2026-50722 |
CWE-20 | Medium | 4.12-2.el8_10.6, 4.15-8.el9_6.1, 4.15-10.el9_8, 5.3.2-1.el9fdp, 5.3.2-1.el10_2 | 25.06.2026 |
SB2026062560 SB2026070973 SB2026070974 and 10 more |
||
| #VU135209 - Improper input validation CVE-2026-50721 |
CWE-20 | Medium | 4.12-2.el8_10.6, 4.15-8.el9_6.1, 4.15-10.el9_8, 5.3.2-1.el9fdp, 5.3.2-1.el10_2 | 25.06.2026 |
SB2026062560 SB2026070973 SB2026070974 and 10 more |
||
| #VU135208 - Reachable Assertion CVE-2026-12413 |
CWE-617 | Medium | 4.12-2.el8_10.6, 4.15-8.el9_6.1, 4.15-10.el9_8, 5.3.2-1.el9fdp, 5.3.2-1.el10_2 | 25.06.2026 |
SB2026062560 SB2026070973 SB2026070974 and 10 more |
||
| #VU105450 - Resource exhaustion CVE-2025-27144 |
CWE-400 | Medium | 5.2-1.el9fdp | 07.03.2025 |
SB2025030735 SB2025030736 SB2025030737 and 80 more |
||
| #VU98828 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2024-9675 |
CWE-22 | Low | 4.5-1.el9 | 21.10.2024 |
SB2024102103 SB2024102104 SB2024102107 and 51 more |
||
| #VU98817 - UNIX Symbolic Link (Symlink) Following CVE-2024-9676 |
CWE-61 | Low | 4.5-1.el9 | 18.10.2024 |
SB2024101822 SB2024101823 SB2024101824 and 54 more |
||
| #VU97217 - Resource exhaustion CVE-2024-34158 |
CWE-400 | Medium | 4.5-1.el9 | 12.09.2024 |
SB2024091261 SB2024091264 SB2024091265 and 76 more |
||
| #VU97216 - Resource exhaustion CVE-2024-34156 |
CWE-400 | Medium | 4.5-1.el9 | 12.09.2024 |
SB2024091261 SB2024091264 SB2024091265 and 143 more |
||
| #VU97215 - Resource exhaustion CVE-2024-34155 |
CWE-400 | Medium | 4.5-1.el9 | 12.09.2024 |
SB2024091261 SB2024091264 SB2024091265 and 81 more |
||
| #VU88534 - Reachable Assertion CVE-2024-3652 |
CWE-617 | Low | 4.5-1.el8_6.3, 4.12-2.el9_4.1 | 15.04.2024 |
SB2024041540 SB2024051090 SB2024062201 and 18 more |
||
| #VU87342 - Error Handling CVE-2024-2357 |
CWE-388 | Low | 4.5-1.el8_6.2, 4.6-3.el9_0.3, 4.9-3.el8_8.1, 4.9-5.el9_2.1, 4.12-1.el9_3.1, 4.12-2.el8_9.2, 4.12-2.el9_4 | 12.03.2024 |
SB2024031220 SB2024031221 SB2024031222 and 16 more |
||
| #VU79140 - Improper input validation CVE-2023-38712 |
CWE-20 | Medium | 4.6-3.el9_0.3, 4.9-5.el9_2.4, 4.12-1.el9, 4.12-2.el8 | 08.08.2023 |
SB2023080858 SB20230821197 SB20230821198 and 10 more |
||
| #VU79139 - NULL Pointer Dereference CVE-2023-38711 |
CWE-476 | Medium | 4.6-3.el9_0.3, 4.9-5.el9_2.4, 4.12-1.el9, 4.12-2.el8 | 08.08.2023 |
SB2023080858 SB20230821197 SB20230821198 and 10 more |
||
| #VU79138 - Reachable Assertion CVE-2023-38710 |
CWE-617 | Medium | 4.6-3.el9_0.3, 4.9-5.el9_2.4, 4.12-1.el9, 4.12-2.el8 | 08.08.2023 |
SB2023080858 SB20230821197 SB20230821198 and 10 more |
||
| #VU76192 - Improper input validation CVE-2023-2295 |
CWE-20 | Medium | 4.9-3.el8_8, 4.9-4.el9_2 | 16.05.2023 |
SB2023051675 SB2023051709 SB2023101614 and 1 more |
||
| #VU75709 - Improper input validation CVE-2023-30570 |
CWE-20 | Medium | 3.29-7.el8_1.2, 3.29-7.el8_2.2, 4.3-6.el8_4.1, 4.5-1.el8_6.1, 4.5-1.el8_7.1, 4.6-3.el9_0.1, 4.6-3.el9_1.1, 4.9-4.el9_2 | 04.05.2023 |
SB2023050401 SB2023050447 SB2023050448 and 14 more |
||
| #VU72679 - Reachable Assertion CVE-2023-23009 |
CWE-617 | Medium | 4.6-3.el9_0.3, 4.9-2.el8_8.2, 4.9-2.el9_2 | 01.03.2023 |
SB2023030121 SB2023030401 SB2023050930 and 6 more |
||
| #VU59521 - NULL Pointer Dereference CVE-2022-23094 |
CWE-476 | Medium | 4.3-6.el8_4, 4.4-4.el8_5 | 12.01.2022 |
SB2022011205 SB2022011729 SB2022012029 and 6 more |
||
| #VU27709 - Improper input validation CVE-2020-1763 |
CWE-20 | Medium | 3.27-10.el8_0, 3.29-7.el8_1, 3.29-7.el8_2 | 12.05.2020 |
SB2020051214 SB2020051215 SB2020051216 and 5 more |
Showing elements 1 - 20 out of 21