CVE-2019-10155
libreswan: The Libreswan Project has found a vulnerability in the processing of IKEv1informational exchange packets which are en...
CVE-2019-10155 is fixed in libreswan on 1 platform, first by RHSA-2019:3391, released November 5, 2019. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
3.1
Low
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0050
43rd percentile
The Libreswan Project has found a vulnerability in the processing of IKEv1informational exchange packets which are encrypted and integrity protectedusing the established IKE SA encryption and integrity keys, but as areceiver, the integrity check value was not verified. This issue affectsversions before 3.29.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| libreswan · RHEL 8 | 0:3.29-6.el8 | RHSA-2019:3391 | Nov 5, 2019 |
| libreswan · Ubuntu 24.10 (oracular) | 3.27-6 | libreswan 3.27-6 | Jan 16, 2026 |
| libreswan · Ubuntu 25.04 (plucky) | 3.27-6 | libreswan 3.27-6 | Jan 16, 2026 |
| libreswan · ol 8 | 0:3.29-6.0.1.el8 | ELSA-2019-3391 | Nov 14, 2019 |