Beveiligingsadvies

CVE-2024-2357

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-03-11 19:39:03
Laatst bijgewerkt 2025-02-13 17:39:47
Toegewezen door libreswan
CVSS-score 6.5
Status PUBLISHED

Beschrijving

The Libreswan Project was notified of an issue causing libreswan to restart under some IKEv2 retransmit scenarios when a connection is configured to use PreSharedKeys (authby=secret) and the connection cannot find a matching configured secret. When such a connection is automatically added on startup using the auto= keyword, it can cause repeated crashes leading to a Denial of Service.