Low severity3.1NVD Advisory· Published Jun 12, 2019· Updated Jun 17, 2026

CVE-2019-10155

Description

The Libreswan Project has found a vulnerability in the processing of IKEv1 informational exchange packets which are encrypted and integrity protected using the established IKE SA encryption and integrity keys, but as a receiver, the integrity check value was not verified. This issue affects versions before 3.29.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Libreswan/Libreswan3 versions
cpe:2.3:a:libreswan:libreswan:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:libreswan:libreswan:*:*:*:*:*:*:*:*range: <3.29
- (no CPE)range: <3.29
- (no CPE)range: 3.29
Strongswan/Strongswan
cpe:2.3:a:strongswan:strongswan:*:*:*:*:*:*:*:*
Range: <5.0.0
Xelerance/Openswan
cpe:2.3:a:xelerance:openswan:*:*:*:*:*:*:*:*
Fedoraproject/Fedora2 versions
cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Server
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

bugzilla.redhat.com/show_bug.cginvdIssue TrackingPatchThird Party Advisory
libreswan.org/security/CVE-2019-10155/nvdPatchVendor Advisory
access.redhat.com/errata/RHSA-2019:3391nvdThird Party Advisory
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EUEXFCN7FAYBKJBQJLYCEUQUCHDEJRZW/nvd
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFGPGLLKAXSLWFI62A6BZHTZSCHRCBXS/nvd

News mentions

No linked articles in our index yet.

cvss	0.202
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000