CVE-2024-3652 - CVE House
Back to Database
Status published Unknown CVE-2024-3652

IKEv1 default AH/ESP responder can cause libreswan to abort and restart

Vulnerability Description

The Libreswan Project was notified of an issue causing libreswan to restart when using IKEv1 without specifying an esp= line. When the peer requests AES-GMAC, libreswan's default proposal handler causes an assertion failure and crashes and restarts. IKEv2 connections are not affected.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-3652

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • github user X1AOxiang

References

More from The Libreswan Project (www.libreswan.org)

View All →
CVE-2024-2357
IKEv2 misconfiguration can cause libreswan to abort and restart
Unknown 0

Affected Vendor

The Libreswan Project (www.libreswan.org)

View all reports →

Affected Software

libreswan
Vulnerable Versions:
3.22, 5.0

Timeline

Official Publish: April 11th, 2024
Last Modified: February 27th, 2026
Added to House: July 22nd, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.