| Package | Affected versions | Patched versions |
|---|---|---|
| libreswan | < 3.29 | 3.29 |
| strongswan | < 5.0.0 | 5.0.0 |
The Libreswan Project has found a vulnerability in the processing of IKEv1 informational exchange packets which are encrypted and integrity protected using the established IKE SA encryption and integrity keys, but as a receiver, the integrity check value was not verified. This issue affects versions before 3.29.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free