Vulnerability · Published Apr 11, 2024 · Assigned by libreswan
CVE-2024-3652IKEv1 default AH/ESP responder can cause libreswan to abort and restart
Medium 6.5
In plain English
A medium-severity security flaw in libreswan from The Libreswan Project (www.libreswan.org). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 57% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
The Libreswan Project was notified of an issue causing libreswan to restart when using IKEv1 without specifying an esp= line. When the peer requests AES-GMAC, libreswan's default proposal handler causes an assertion failure and crashes and restarts. IKEv2 connections are not affected.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | libreswan | 4.12-2.el8_10.4 | ALSA-2024:4376 |
| AlmaLinux:9 | libreswan | 4.12-2.el9_4.1 | ALSA-2024:4050 |
| Alpine:v3.20 | libreswan | 4.15-r0 | ALPINE-CVE-2024-3652 |
| Alpine:v3.21 | libreswan | 4.15-r0 | ALPINE-CVE-2024-3652 |
| Alpine:v3.22 | libreswan | 4.15-r0 | ALPINE-CVE-2024-3652 |
| Alpine:v3.23 | libreswan | 4.15-r0 | ALPINE-CVE-2024-3652 |
| Alpine:v3.24 | libreswan | 4.15-r0 | ALPINE-CVE-2024-3652 |
| Debian:12 | libreswan | no fix listed | DEBIAN-CVE-2024-3652 |
| Debian:13 | libreswan | 4.15-1 | DEBIAN-CVE-2024-3652 |
| Rocky Linux:8 | libreswan | 0:4.12-2.el8_10.4 | RLSA-2024:4376 |
| Rocky Linux:9 | libreswan | 0:4.12-2.el9_4.1 | RLSA-2024:4050 |
| Ubuntu:22.04:LTS | libreswan | no fix listed | UBUNTU-CVE-2024-3652 |
| Ubuntu:24.04:LTS | libreswan | no fix listed | UBUNTU-CVE-2024-3652 |
| Ubuntu:25.10 | libreswan | no fix listed | UBUNTU-CVE-2024-3652 |
| Ubuntu:26.04:LTS | libreswan | no fix listed | UBUNTU-CVE-2024-3652 |
| Ubuntu:26.10 | libreswan | no fix listed | UBUNTU-CVE-2024-3652 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| The Libreswan Project (www.libreswan.org) | libreswan | 3.22 – through 4.14 |
Weakness: CWE-404 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H