DeutschShown in its original language — a full translation is planned for a future version.
Red Hat Enterprise Linux (libreswan): Mehrere Schwachstellen ermöglichen Denial of Service
view advisory published 2026-07-26
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um einen Denial of Service Angriff durchzuführen und möglicherweise die Authentifizierung zu umgehen.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-14957US | — | — | ||
In FIPS mode, Libreswan's add_decoded_cert() function calls CERT_ExtractPublicKey() and asserts that the result is not NULL. However, CERT_ExtractPublicKey() returns NULL when publ… | ||||
| CVE-2026-50722US | medium5.9 | — | ||
Libreswan, via the function RSA_authenticate_hash_signature_pkcs1_1_5_rsa(), did not correctly verify the DER encoding of the ASN.1 digest when the IKEv2 AUTH payload was encoded u… | ||||
| CVE-2026-50721US | medium5.9 | — | ||
Libreswan, via the function RSA_authenticate_hash_signature_raw_rsa(), did not correctly verify the length of the authentication hash when the SIG payload of an IKEv1 packet was en… | ||||
| CVE-2026-12413US | — | — | ||
An invalidly formatted IKEv2 fragment causes the Libreswan pluto daemon to crash and restart. Continued exploitation would cause a denial of service. The function reassemble_v2_inc… | ||||
02
references
External citations — patches, advisories, analysis.
- Oracle Linux Security Advisory ELSA-2026-46396 vom 2026-08-04external
- Oracle Linux Security Advisory ELSA-2026-46397 vom 2026-08-03external
- Red Hat Security Advisory RHSA-2026:46396 vom 2026-07-26external
- Red Hat Security Advisory RHSA-2026:46397 vom 2026-07-26external
- Red Hat Security Advisory RHSA-2026:46398 vom 2026-07-26external
- Red Hat Security Advisory RHSA-2026:46986 vom 2026-07-28external
- Red Hat Security Advisory RHSA-2026:55449 vom 2026-08-17external
- Red Hat Security Advisory RHSA-2026:57741 vom 2026-08-20external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan