CVE-2019-10155

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2019-10155
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-10155.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2019-10155
Downstream
Published
2019-06-12T14:29:02.917Z
Modified
2026-07-08T05:55:27.720979702Z
Severity
  • 3.1 (Low) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L CVSS Calculator
Summary
[none]
Details

The Libreswan Project has found a vulnerability in the processing of IKEv1 informational exchange packets which are encrypted and integrity protected using the established IKE SA encryption and integrity keys, but as a receiver, the integrity check value was not verified. This issue affects versions before 3.29.

Database specific 
{
    "unresolved_ranges": [
        {
            "cpes": [
                "cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*",
                "cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*"
            ],
            "vendor_product": "fedoraproject:fedora",
            "extracted_events": [
                {
                    "introduced": "29"
                },
                {
                    "last_affected": "29"
                },
                {
                    "introduced": "30"
                },
                {
                    "last_affected": "30"
                }
            ],
            "source": "CPE_STRING"
        },
        {
            "cpes": [
                "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*"
            ],
            "vendor_product": "redhat:enterprise_linux",
            "extracted_events": [
                {
                    "introduced": "8.0"
                },
                {
                    "last_affected": "8.0"
                }
            ],
            "source": "CPE_STRING"
        }
    ]
}
References

Affected packages

Git / github.com/libreswan/libreswan

Affected ranges

Type
GIT
Repo
https://github.com/libreswan/libreswan
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
e364be77cab139b097947cba89ff28a7b71c961f
Database specific 
{
    "cpe": "cpe:2.3:a:libreswan:libreswan:*:*:*:*:*:*:*:*",
    "source": "CPE_RANGE",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "3.29"
        }
    ]
}

Affected versions

0.*
0.9.9
libreswan-0.*
libreswan-0.0.1
Other
pre_FreeBSD_merge_200607
v2.*
v2.5.01
v2.5.03
v2.6.01
v2.6.03
v2.6.07
v2.6.14
v2.6.15
v2.6.15dr2
v2.6.16
v2.6.16dr1
v2.6.16dr2
v2.6.16dr3
v2.6.16dr4
v2.6.16dr5
v2.6.18
v2.6.18rc1
v2.6.19
v2.6.20
v2.6.20bis
v2.6.20rc2
v2.6.21
v2.6.22dr1
v2.6.23
v2.6.23dr1
v2.6.24
v2.6.24rc2
v2.6.24rc3
v2.6.24rc4
v2.6.24rc5
v2.6.26
v2.6.26rc1
v2.6.27dr1
v2.6.28dr1
v2.6.29
v2.6.29rc2
v2.6.32
v2.6.32dr1
v2.6.32dr3
v2.6.32dr4
v2.6.32dr5
v2.6.32rc1
v2.6.32rc3
v2.6.32rc5
v2.6.32rc6
v2.6.32rc7
v2.6.32rc8
v2.6.32rc9
v2.6.33dr2
v2.6.33rc1
v2.6.34
v2.6.34dr1
v2.6.34dr2
v2.6.34rc1
v2.6.34rc2
v2.6.34rc5
v2.6.34rc6
v2.6.35dr1
v2.6.36
v2.6.36dr1
v2.6.36rc1
v2.6.37
v2.6.38
v2.6.38dr2
v2.6.38rc1
v2.6.38rc2
v2.92
v2.93
v3.*
v3.1
v3.11dr1
v3.14
v3.14rc2
v3.14rc3
v3.16
v3.16rc2
v3.16rc3
v3.17
v3.18
v3.18dr2
v3.19
v3.20
v3.20dr3
v3.20dr4
v3.21
v3.21rc5
v3.22
v3.22dr1
v3.25
v3.26
v3.27
v3.28
v3.2rc1
v3.3
v3.4
v3.5
v3.6
v3.7

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-10155.json"

Git / github.com/strongswan/strongswan

Affected ranges

Type
GIT
Repo
https://github.com/strongswan/strongswan
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
1e5634c9b3eaad5231ad4a90c394c5589fb2a387
Database specific 
{
    "cpe": "cpe:2.3:a:strongswan:strongswan:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "5.0.0"
        }
    ],
    "source": "CPE_RANGE"
}

Affected versions

4.*
4.0.0
4.0.1
4.0.2
4.0.3
4.0.4
4.0.5
4.0.6
4.0.7
4.1.0
4.1.1
4.1.10
4.1.11
4.1.2
4.1.3
4.1.4
4.1.5
4.1.6
4.1.7
4.1.8
4.1.9
4.2.0
4.2.1
4.2.10
4.2.11
4.2.12
4.2.13
4.2.14
4.2.2
4.2.3
4.2.4
4.2.5
4.2.6
4.2.7
4.2.8
4.2.9
4.3.0
4.3.1
4.3.2
4.3.3
4.3.4
4.3.5
4.3.5rc1
4.3.6
4.4.0
4.4.1
4.5.0
4.5.1
4.5.2
4.5.3
4.6.0
4.6.1
4.6.2
4.6.3

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-10155.json"