CVEs published by Libreswan Project

CVEs published by Libreswan Project (CVE Numbering Authority). 3 tracked.

CVE-2026-12413 HIGH 7.5 UPGRADE An invalidly formatted IKEv2 fragment causes the Libreswan pluto daemon to crash and restart
CVE-2026-50721 HIGH 8.1 UPGRADE Libreswan, via the function RSA_authenticate_hash_signature_raw_rsa(), did not correctly verify the length of
CVE-2026-50722 HIGH 8.1 UPGRADE Libreswan, via the function RSA_authenticate_hash_signature_pkcs1_1_5_rsa(), did not correctly verify the DER