libreswan — Vulnerabilities & Security Advisories 13

All 13 CVE vulnerabilities found in libreswan, with AI-generated Chinese analysis, references, and POCs.

CVE ID	Title	CVSS	Severity	Published
CVE-2026-77207	Null Pointer Dereference in PKCS#7 bundle with no certificates CWE-476	7.5	High	2026-10-13
CVE-2026-77206	IKEv2 pre-authentication Null Pointer Dereference in EAP code CWE-476	7.5	High	2026-10-13
CVE-2026-77205	Denial of Service via sending bogus X.509 certificates CWE-772	3.7	Low	2026-10-13
CVE-2026-94453	IKEv2 Use-After-Free bug when using IKE-over-TCP CWE-416	7.5	High	2026-10-13
CVE-2026-14957	FIPS mode assertion failure via malicious CERT payload CWE-617	7.5	High	2026-09-02
CVE-2026-50721	IKEv1 Denial of Service via RSA-SHA1 (PKCS#1 Version 1.5 Encrypted) authentication payload CWE-347	8.1	High	2026-07-02
CVE-2026-50722	IKEv2 Denial of Service via RSA-SHA1 (PKCS#1 RSASSA-PKCS1-v1_5) authentication payload CWE-347	8.1	High	2026-07-02
CVE-2026-12413	IKEv2 Denial of Service via malformed fragmentation CWE-193	7.5	High	2026-07-02
CVE-2024-3652	IKEv1 default AH/ESP responder can cause libreswan to abort and restart	7.5^AI	High ^AI	2024-04-11
CVE-2024-2357	IKEv2 misconfiguration can cause libreswan to abort and restart	7.5^AI	High ^AI	2024-03-11
CVE-2023-2295	Libreswan 安全漏洞 CWE-400	7.5	-	2023-05-17
CVE-2020-1763	Libreswan 缓冲区错误漏洞 CWE-125	7.5	High	2020-05-12
CVE-2019-10155	Libreswan 输入验证错误漏洞 CWE-354	4.2	-	2019-06-12

All 13 known CVE vulnerabilities affecting libreswan with full Chinese analysis, references, and POCs where available.