CLEANSTART-2024-QN31629

See a problem?
Import Source
https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2024/CLEANSTART-2024-QN31629.json
JSON Data
https://api.osv.dev/v1/vulns/CLEANSTART-2024-QN31629
Upstream
Published
2026-10-31T14:18:52Z
Modified
2026-10-31T16:02:20Z
Severity
  • 3.1 (Low) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L CVSS Calculator
Summary
Libreswan Project has found a vulnerability in the processing of IKEv1 informational exchange packets which are encrypted and integrity protected using the established IKE SA encryption and integri...
Details

Security vulnerability affects the libreswan package. The Libreswan Project has found a vulnerability in the processing of IKEv1 informational exchange packets which are encrypted and integrity protected using the established IKE SA encryption and integrity keys, but as a receiver, the integrity check value was not verified.

References

Affected packages

CleanStart / libreswan

Package

Name
libreswan
Purl
pkg:apk/cleanstart/libreswan

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.29-r0

Database specific

source
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2024/CLEANSTART-2024-QN31629.json"