Back to search
CVE-2024-3652
Published: Apr 11, 2024
Modified: Feb 27, 2026
PUBLISHED
Description
The Libreswan Project was notified of an issue causing libreswan to restart when using IKEv1 without specifying an esp= line. When the peer requests AES-GMAC, libreswan's default proposal handler causes an assertion failure and crashes and restarts. IKEv2 connections are not affected.
| Vendor | Product | Versions |
|---|---|---|
The Libreswan Project (www.libreswan.org) | libreswan | affected 3.22 - <= 4.14unaffected 5.0 |
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now