CVE-2013-7294: Libreswan

Medium severity, CVSS 5.0. EPSS: 2.5% chance of exploitation in the next 30 days.

The ikev2parent_inI1outR1 function in pluto/ikev2_parent.c in libreswan before 3.7 allows remote attackers to cause a denial of service (restart) via an IKEv2 I1 notification without a KE payload.

Affected products

• Libreswan Libreswan: up to and including 3.6; version 3.0 only; version 3.1 only; version 3.2 only; version 3.3 only; version 3.4 only; …

Published 2014-01-16. Last modified 2026-06-17.