Product by The Libreswan Project
Libreswan
10 known vulnerabilities in Libreswan (The Libreswan Project), 0 of them actively exploited (CISA KEV).
Key figures
10
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2020-1763 | the libreswan Project Libreswan: Out-of-bounds Read | 7.5 | |
| High | CVE-2026-77206 | IKEv2 pre-authentication Null Pointer Dereference in EAP code | 7.5 | |
| High | CVE-2026-77207 | Null Pointer Dereference in PKCS#7 bundle with no certificates | 7.5 | |
| High | CVE-2026-94453 | IKEv2 Use-After-Free bug when using IKE-over-TCP | 7.5 | |
| High | CVE-2026-12413 | IKEv2 Denial of Service via malformed fragmentation | 7.5 | |
| High | CVE-2026-14957 | FIPS mode assertion failure via malicious CERT payload | 7.5 | |
| High | CVE-2026-50721 | IKEv1 Denial of Service via RSA-SHA1 (PKCS#1 Version 1.5 Encrypted) authentication payload | 5.9 | |
| High | CVE-2026-50722 | IKEv2 Denial of Service via RSA-SHA1 (PKCS#1 RSASSA-PKCS1-v1_5) authentication payload | 5.9 | |
| Low | CVE-2026-77205 | Denial of Service via sending bogus X.509 certificates | 3.7 | |
| Low | CVE-2019-10155 | the libreswan Project Libreswan: Improper Validation of Integrity Check Value | 3.1 |
News
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 27sans-atrisk-mail,