Vulnerabilities in the libreswan Project
10 resultsCVE-2020-1763HIGHAn out-of-bounds buffer read flaw was found in the pluto daemon of libreswan from versions 3.27 till 3.31 where, an unauthenticated attackerEPSS 3.6%CVE-2026-77206HIGHIKEv2 pre-authentication Null Pointer Dereference in EAP codeEPSS 0.7%CVE-2026-12413HIGHIKEv2 Denial of Service via malformed fragmentationEPSS 0.6%CVE-2019-10155LOWThe Libreswan Project has found a vulnerability in the processing of IKEv1 informational exchange packets which are encrypted and integrity EPSS 0.5%CVE-2026-14957HIGHFIPS mode assertion failure via malicious CERT payloadEPSS 0.5%CVE-2026-77207HIGHNull Pointer Dereference in PKCS#7 bundle with no certificatesEPSS 0.5%CVE-2026-94453HIGHIKEv2 Use-After-Free bug when using IKE-over-TCPEPSS 0.5%CVE-2026-50721HIGHIKEv1 Denial of Service via RSA-SHA1 (PKCS#1 Version 1.5 Encrypted) authentication payloadEPSS 0.4%CVE-2026-50722HIGHIKEv2 Denial of Service via RSA-SHA1 (PKCS#1 RSASSA-PKCS1-v1_5) authentication payloadEPSS 0.3%CVE-2026-77205LOWDenial of Service via sending bogus X.509 certificatesEPSS 0.2%