PulseLinuxLINUX UPDATE INTELLIGENCE
CVE Database›Document archive›CVE-2019-10155

CVE-2019-10155

libreswan: vulnerability in the processing of IKEv1 informational packets due to missing integrity check

Loading…

Severity

Low

Red Hat Product Security

3.1

CVSS 3.0

Review impact separately from score.

Published · June 10, 2019

Updated · November 22, 2025

Description

A vulnerability was found in the Libreswan Project. It was discovered that libreswan, strongswan, and openswan did not verify the integrity check value for received IKEv1 Informational Exchange packets.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

If all IKE peers support IKEv2, it is possible to reconfigure IKEv1 connections to use IKEv2 via the "ikev2=insist" keyword.

CVSS / CWE

CVSS 3.0 · 3.1
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L

CWE-354 · Improper Validation of Integrity Check Value