CVE-2026-12413

Katalog CVE

CVSS 7.5 · High EPSS 0,60%

Kerentanan Off-by-one Error pada libreswan. Skor CVSS 3.1 7.5 (High) menurut CNA.

Deskripsi (NVD)

An invalidly formatted IKEv2 fragment causes the Libreswan pluto daemon to crash and restart. Continued exploitation would cause a denial of service. The function reassemble_v2_incoming_fragments() would ignore unknown outer payloads but still store these in a fixed size array msg_digest.digest[PAYLIMIT]. An off-by-one error in the assertion PASSERT(logger, md->digest_roof < elemsof(md->digest)) causes the daemon to abort. No remote code execution is possible. Any configuration that allows IKEv2 connections that do not set fragmentation=no are vulnerable. IKEv1 is not affected.

Rincian

Terbit di NVD

2 Juli 2026

Terakhir diubah

8 Juli 2026

Status NVD

Analyzed

CVSS 3.1

7.5 (High), sumber CNA
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-193: Off-by-one Error
CWE-617: Reachable Assertion

EPSS (30 hari)

0,60% peluang dieksploitasi; lebih tinggi dari 47,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://libreswan.org/security/CVE-2026-12413/ advisory vendor
• https://libreswan.org/security/CVE-2026-12413/CVE-2026-12413.txt advisory vendor · mitigasi