Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-14957— FIPS mode assertion failure via malicious CERT payload

Quick assessment

Affected
The Libreswan Project libreswan
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 FIPS 模式下，Libreswan 的 函数会调用 ，并断言（assert）其返回值不为 NULL。然而，当公钥提取失败时（例如，当 RSA 指数被设置为 0 时）， 会返回 NULL。 远程攻击者可以通过在 CERT 载荷（payload）中发送一个格式错误的 X.509 证书来触发该断言失败，从而导致 pluto 守护进程中断并重启。持续利用此漏洞可导致拒绝服务（DoS）。该漏洞无法实现远程代码执行。 IKEv1 和 IKEv2 均受影响。 该漏洞仅在以下条件下可被利用： 1. 操作系统和 Libresw

CVSS 7.5 · High

Possible ATT&CK Techniques 1 AI

T1220 · XSL Script Processing
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-14957

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
FIPS mode assertion failure via malicious CERT payload
Source: CVE Program / CVE List V5
Vulnerability Description
In FIPS mode, Libreswan's add_decoded_cert() function calls CERT_ExtractPublicKey() and asserts that the result is not NULL. However, CERT_ExtractPublicKey() returns NULL when public key extraction fails, for example if the RSA exponent is set to 0. A remote attacker can send a malformed X.509 certificate in a CERT payload to trigger the assertion, causing the pluto daemon to abort and restart. Continued exploitation causes a denial of service. No remote code execution is possible. Both IKEv1 and IKEv2 are affected. The vulnerability is only exploitable when both the OS and libreswan are running in FIPS mode and at least one CA certificate is loaded. The CERT payload is processed before peer authentication, so no credentials are needed to exploit this. Configurations using only PreSharedKey (PSK) authentication with no CA certificates loaded in the NSS database are not vulnerable.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
可达断言
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
The Libreswan Project libreswan 3.0 ~ 5.3.1 -

II. Public POCs for CVE-2026-14957

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-14957

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-14957 (2)

IV. Related Vulnerabilities

Same product: libreswan
Same vendor: The Libreswan Project
Same weakness: CWE-617

V. Comments for CVE-2026-14957

No comments yet

Leave a comment