libreswan libreswan

Name: libreswan libreswan
Brand: libreswan

productUS

cpe:2.3:a:libreswan:libreswan:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical9high12medium1low

updated 2026-10-28

vulnerabilities (24)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-1763US	high7.5	3.57% (89th)	—	no fix	2020-05-12	2 versions
CVE-2016-5391US	high7.5	3.01% (87th)	—	no fix	2017-06-13	≤ 3.17
CVE-2015-3240US	medium4.3	2.79% (86th)	—	no fix	2015-11-09	= 3.14
CVE-2019-12312US	high7.5	2.75% (86th)	—	3.28	2019-05-24	< 3.28
CVE-2016-5361US	high7.5	2.72% (86th)	—	no fix	2016-06-16	≤ 3.16
CVE-2013-4564US	medium5.0	2.67% (86th)	—	no fix	2014-01-07	= 3.6
CVE-2015-3204US	medium5.0	2.60% (85th)	—	no fix	2015-07-01	4 versions
CVE-2013-7294US	medium5.0	2.55% (85th)	—	no fix	2014-01-16	7 versions
CVE-2022-23094US	high7.5	2.54% (85th)	—	4.6	2022-01-15	4.2 → 4.6
CVE-2016-3071US	high7.5	2.53% (85th)	—	no fix	2016-04-18	= 3.16
CVE-2013-6467US	medium5.0	2.47% (84th)	—	no fix	2014-01-26	8 versions
CVE-2013-2052US	medium5.1	1.76% (78th)	—	no fix	2013-07-09	2 versions
CVE-2013-7283US	high9.3	1.63% (76th)	—	no fix	2014-01-09	= 3.6
CVE-2023-23009US	medium6.5	1.61% (76th)	—	no fix	2023-02-21	= 4.9
CVE-2023-2295US	high7.5	1.58% (75th)	—	no fix	2023-05-17	2 versions
CVE-2023-30570US	high7.5	1.19% (68th)	—	no fix	2023-05-29	3.28 → 4.10
CVE-2023-38712US	medium6.5	0.81% (57th)	—	4.0	2023-08-25	2 versions
CVE-2023-38711US	medium6.5	0.81% (57th)	—	4.12	2023-08-25	4.6 → 4.12
CVE-2023-38710US	medium6.5	0.81% (57th)	—	4.12	2023-08-25	3.20 → 4.12
CVE-2024-3652US	—	0.80% (56th)	—	4.15	2024-04-11	3.22 → 4.15
CVE-2026-12413US	—	0.60% (48th)	—	5.3.1	2026-07-02	4.6 → 5.3.1
CVE-2019-10155US	low3.1	0.50% (43rd)	—	3.29	2019-06-12	< 3.29
CVE-2026-50721US	medium5.9	0.39% (33rd)	—	5.3.1	2026-07-02	< 5.3.1
CVE-2026-50722US	medium5.9	0.35% (28th)	—	5.3.1	2026-07-02	< 5.3.1

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-617Reachable Assertion8 CVEs
CWE-476NULL Pointer Dereference6 CVEs
CWE-20Improper Input Validation5 CVEs
CWE-400Uncontrolled Resource Consumption3 CVEs
CWE-189CWE-1892 CVEs
CWE-347Improper Verification of Cryptographic Signature2 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs
CWE-125Out-of-bounds Read1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE24 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan