the libreswan Project vulnerabilities

CVEs per yearBy the year they were published

1. 20191
2. 20201
3. 20268

Newest CVEs

• CVE-2026-77207

  Null Pointer Dereference in PKCS#7 bundle with no certificates

  The Libreswan Project · libreswan

  High7.5
• CVE-2026-77206

  IKEv2 pre-authentication Null Pointer Dereference in EAP code

  The Libreswan Project · libreswan

  High7.5
• CVE-2026-77205

  Denial of Service via sending bogus X.509 certificates

  The Libreswan Project · libreswan

  Low3.7
• CVE-2026-94453

  IKEv2 Use-After-Free bug when using IKE-over-TCP

  The Libreswan Project · libreswan

  High7.5
• CVE-2026-14957

  FIPS mode assertion failure via malicious CERT payload

  The Libreswan Project · libreswan

  High7.5
• CVE-2026-50721

  IKEv1 Denial of Service via RSA-SHA1 (PKCS#1 Version 1.5 Encrypted) authentication payload

  The Libreswan Project · libreswan

  High7.5
• CVE-2026-50722

  IKEv2 Denial of Service via RSA-SHA1 (PKCS#1 RSASSA-PKCS1-v1_5) authentication payload

  The Libreswan Project · libreswan

  High7.5
• CVE-2026-12413

  IKEv2 Denial of Service via malformed fragmentation

  The Libreswan Project · libreswan

  High7.5
• CVE-2020-1763

  An out-of-bounds buffer read flaw was found in the pluto daemon of libreswan from versions 3.27 till 3.31 where, an unauthenticated attacker could use this…

  the libreswan Project · libreswan

  High7.5
• CVE-2019-10155

  The Libreswan Project has found a vulnerability in the processing of IKEv1 informational exchange packets which are encrypted and integrity protected using the…

  the libreswan Project · libreswan

  Low3.1