# CVE-2019-10155: libreswan: The Libreswan Project has found a vulnerability in the processing of IKEv1informational exchange packets which are en...

CVE-2019-10155 is fixed in libreswan on 1 platform, first by RHSA-2019:3391, released November 5, 2019. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2019-10155
- Priority: Routine
- CVSS: 3.1 (Low)
- EPSS: 0.0050
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Nov 5, 2019

## Description

The Libreswan Project has found a vulnerability in the processing of IKEv1informational exchange packets which are encrypted and integrity protectedusing the established IKE SA encryption and integrity keys, but as areceiver, the integrity check value was not verified. This issue affectsversions before 3.29.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | libreswan RHEL 8 | 0:3.29-6.el8 | [RHSA-2019:3391](https://patchblox.com/security/data/fix/linux/rhsa-2019-3391.md) | Nov 5, 2019 |
| Linux | libreswan Ubuntu 24.10 (oracular) | 3.27-6 | [libreswan 3.27-6](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-libreswan-3.27-6.md) | Jan 16, 2026 |
| Linux | libreswan Ubuntu 25.04 (plucky) | 3.27-6 | [libreswan 3.27-6](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-libreswan-3.27-6.md) | Jan 16, 2026 |
| Linux | libreswan ol 8 | 0:3.29-6.0.1.el8 | [ELSA-2019-3391](https://patchblox.com/security/data/fix/linux/elsa-2019-3391.md) | Nov 14, 2019 |

---

Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo