Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
6.5

Libreswan may restart during IKEv1 connections missing ESP setting

published 4 days ago
Summary

The Libreswan VPN software can unexpectedly stop and start again if an IKEv1 connection is configured without an explicit ESP (encryption) line. This interruption could cause brief loss of VPN connectivity for users. Review your IKEv1 configurations and add an esp= line to prevent the restart.

What to do
  • Update cleanstart libreswan to version 4.15-r0.
Affected software
Ecosystem VendorProductAffected versions
CleanStart cleanstart libreswan < 4.15-r0
Fix: upgrade to 4.15-r0
Original advisory text
Libreswan Project was notified of an issue causing libreswan to restart when using IKEv1 without specifying an esp= line
Security vulnerability affects the libreswan package. The Libreswan Project was notified of an issue causing libreswan to restart when using IKEv1 without specifying an esp= line.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
6.5 Medium
Timeline
Published31 Oct 2026
Updated31 Oct 2026
First seen31 Oct 2026
Sources
CLEANSTART-2024-SY78881 · OSV
Track software like this
Free during beta