libreswan 3.4

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:libreswan:libreswan:3.4:*:*:*:*:*:*:*

part: a version: 3.4 update: *

VendorLibreswan (b2257987-aa6b-5a86-8bf6-c931c9c8069e)
ProductLibreswan (1490547b-9781-59af-b16c-af113f76bb28)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/libreswan purl2cpe 2026-06-01 10:14:57.648882
pkg:deb/ubuntu/libreswan purl2cpe 2026-06-01 10:14:57.648884
pkg:github/libreswan/libreswan purl2cpe 2026-06-01 10:14:57.648885
pkg:gitlab/redhat/libreswan purl2cpe 2026-06-01 10:14:57.648886
pkg:rpm/centos/libreswan purl2cpe 2026-06-01 10:14:57.648888
pkg:rpm/fedora/libreswan purl2cpe 2026-06-01 10:14:57.648889
pkg:rpm/opensuse/libreswan purl2cpe 2026-06-01 10:14:57.648891

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-7294 vulnerable 2026-06-08 05:05:09.464611 Details available
The ikev2parent_inI1outR1 function in pluto/ikev2_parent.c in libreswan before 3.7 allows remote attackers to cause a denial of service (restart) via an IKEv2 I1 notification without a KE payload.
Published: 2014-01-16T02:00:00.000Z
Updated: 2024-08-06T18:01:20.334Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6467 vulnerable 2026-06-08 05:04:57.036192 Details available
Libreswan 3.7 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon restart) via IKEv2 packets that lack expected payloads.
Published: 2014-01-26T20:00:00.000Z
Updated: 2024-08-06T17:39:01.252Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.