Unrated severityNVD Advisory· Published Jun 12, 2019· Updated Aug 4, 2024

CVE-2019-10155

Description

The Libreswan Project has found a vulnerability in the processing of IKEv1 informational exchange packets which are encrypted and integrity protected using the established IKE SA encryption and integrity keys, but as a receiver, the integrity check value was not verified. This issue affects versions before 3.29.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Libreswan/Libreswanllm-fuzzy2 versions
<3.29+ 1 more
- (no CPE)range: <3.29
- (no CPE)range: 3.29

Patches

Vulnerability mechanics

References

access.redhat.com/errata/RHSA-2019:3391mitrevendor-advisoryx_refsource_REDHAT
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EUEXFCN7FAYBKJBQJLYCEUQUCHDEJRZW/mitrevendor-advisoryx_refsource_FEDORA
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFGPGLLKAXSLWFI62A6BZHTZSCHRCBXS/mitrevendor-advisoryx_refsource_FEDORA
bugzilla.redhat.com/show_bug.cgimitrex_refsource_CONFIRM
libreswan.org/security/CVE-2019-10155/mitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000