CVE-2026-14957

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-14957", "assignerOrgId": "d42dc95b-23f1-4e06-9076-20753a0fb0df", "state": "PUBLISHED", "assignerShortName": "libreswan", "dateReserved": "2026-07-07T13:39:23.932Z", "datePublished": "2026-09-02T02:19:00.114Z", "dateUpdated": "2026-09-02T13:00:19.908Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "d42dc95b-23f1-4e06-9076-20753a0fb0df", "shortName": "libreswan", "dateUpdated": "2026-09-02T02:19:00.114Z"}, "title": "FIPS mode assertion failure via malicious CERT payload", "descriptions": [{"lang": "en", "value": "In FIPS mode, Libreswan's add_decoded_cert() function calls CERT_ExtractPublicKey() and asserts that the result is not NULL. However, CERT_ExtractPublicKey() returns NULL when public key extraction fails, for example if the RSA exponent is set to 0. A remote attacker can send a malformed X.509 certificate in a CERT payload to trigger the assertion, causing the pluto daemon to abort and restart. Continued exploitation causes a denial of service. No remote code execution is possible. Both IKEv1 and IKEv2 are affected. The vulnerability is only exploitable when both the OS and libreswan are running in FIPS mode and at least one CA certificate is loaded. The CERT payload is processed before peer authentication, so no credentials are needed to exploit this. Configurations using only PreSharedKey (PSK) authentication with no CA certificates loaded in the NSS database are not vulnerable."}], "affected": [{"vendor": "The Libreswan Project", "product": "libreswan", "packageName": "libreswan", "collectionURL": "https://github.com/libreswan/libreswan", "repo": "https://github.com/libreswan/libreswan", "versions": [{"version": "3.0", "status": "affected", "lessThanOrEqual": "5.3.1", "versionType": "semver"}, {"version": "5.3.2", "status": "unaffected", "versionType": "semver"}], "defaultStatus": "unaffected", "programRoutines": [{"name": "add_decoded_cert"}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-617", "description": "CWE-617: Reachable Assertion"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-252", "description": "CWE-252: Unchecked Return Value"}]}], "impacts": [{"capecId": "CAPEC-463", "descriptions": [{"lang": "en", "value": "Denial of Service via assertion failure in pluto daemon when processing a malformed X.509 certificate CERT payload in FIPS mode"}]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH"}}, {"other": {"type": "vendorSeverity", "content": {"value": "MEDIUM", "description": "Vendor-assessed severity: Medium. Exploitation requires FIPS mode to be enabled on both the OS and libreswan, and at least one CA certificate to be loaded. The daemon automatically restarts after the crash, requiring continued exploitation for sustained denial of service."}}}], "workarounds": [{"lang": "en", "value": "No workaround is available unless one is willing to disable FIPS mode. If libreswan is only using PreSharedKey (PSK) authentication and the NSS database contains no CA certificates, CERT payloads are ignored and libreswan is not vulnerable."}], "solutions": [{"lang": "en", "value": "Upgrade to libreswan 5.3.2 or later. Patches for libreswan 4.15 and 5.3 are available at https://libreswan.org/security/CVE-2026-14957/"}], "exploits": [{"lang": "en", "value": "No known exploitation in the wild. Exploitation requires the target to be running in FIPS mode with at least one CA certificate loaded. The CERT payload can be sent before peer authentication, so no credentials are needed."}], "configurations": [{"lang": "en", "value": "Exploitation is only possible when both the OS and libreswan are running in FIPS mode and at least one CA certificate is loaded. Both IKEv1 and IKEv2 are vulnerable. Configurations using only PreSharedKey (PSK) authentication with no CA certificates in the NSS database are not vulnerable. Use 'sudo ipsec fipsstatus' to check FIPS mode and 'sudo ipsec listcacerts' to check for loaded CA certificates."}], "credits": [{"lang": "en", "type": "tool", "value": "Claude (Anthropic)"}, {"lang": "en", "type": "reporter", "value": "Guillaume Winter"}], "source": {"discovery": "EXTERNAL", "defects": ["CVE-2026-14957"]}, "references": [{"name": "Libreswan Security Advisory CVE-2026-14957", "url": "https://libreswan.org/security/CVE-2026-14957/CVE-2026-14957.txt", "tags": ["vendor-advisory"]}, {"name": "Libreswan CVE-2026-14957 Patches", "url": "https://libreswan.org/security/CVE-2026-14957/", "tags": ["patch"]}], "timeline": [{"time": "2026-06-17T00:00:00.000Z", "lang": "en", "value": "Guillaume Winter shared a Claude audit review"}, {"time": "2026-07-09T00:00:00.000Z", "lang": "en", "value": "Advanced notice given to supported customers and distributions"}, {"time": "2026-07-15T00:00:00.000Z", "lang": "en", "value": "Public announcement and release of libreswan 5.3.2"}], "taxonomyMappings": [{"taxonomyName": "ATT&CK", "taxonomyVersion": "15.1", "taxonomyRelations": [{"taxonomyId": "T1499.004", "relationshipName": "maps to", "relationshipValue": "Application or System Exploitation (DoS)"}]}], "x_generator": {"engine": "cvelib 1.8.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-09-02T13:00:08.993590Z", "id": "CVE-2026-14957", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-09-02T13:00:19.908Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-14957", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-09-02T13:00:08.993590Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-09-02T13:00:15.062Z"}}], "cna": {"title": "FIPS mode assertion failure via malicious CERT payload", "source": {"defects": ["CVE-2026-14957"], "discovery": "EXTERNAL"}, "credits": [{"lang": "en", "type": "tool", "value": "Claude (Anthropic)"}, {"lang": "en", "type": "reporter", "value": "Guillaume Winter"}], "impacts": [{"capecId": "CAPEC-463", "descriptions": [{"lang": "en", "value": "Denial of Service via assertion failure in pluto daemon when processing a malformed X.509 certificate CERT payload in FIPS mode"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}, {"other": {"type": "vendorSeverity", "content": {"value": "MEDIUM", "description": "Vendor-assessed severity: Medium. Exploitation requires FIPS mode to be enabled on both the OS and libreswan, and at least one CA certificate to be loaded. The daemon automatically restarts after the crash, requiring continued exploitation for sustained denial of service."}}}], "affected": [{"repo": "https://github.com/libreswan/libreswan", "vendor": "The Libreswan Project", "product": "libreswan", "versions": [{"status": "affected", "version": "3.0", "versionType": "semver", "lessThanOrEqual": "5.3.1"}, {"status": "unaffected", "version": "5.3.2", "versionType": "semver"}], "packageName": "libreswan", "collectionURL": "https://github.com/libreswan/libreswan", "defaultStatus": "unaffected", "programRoutines": [{"name": "add_decoded_cert"}]}], "exploits": [{"lang": "en", "value": "No known exploitation in the wild. Exploitation requires the target to be running in FIPS mode with at least one CA certificate loaded. The CERT payload can be sent before peer authentication, so no credentials are needed."}], "timeline": [{"lang": "en", "time": "2026-06-17T00:00:00.000Z", "value": "Guillaume Winter shared a Claude audit review"}, {"lang": "en", "time": "2026-07-09T00:00:00.000Z", "value": "Advanced notice given to supported customers and distributions"}, {"lang": "en", "time": "2026-07-15T00:00:00.000Z", "value": "Public announcement and release of libreswan 5.3.2"}], "solutions": [{"lang": "en", "value": "Upgrade to libreswan 5.3.2 or later. Patches for libreswan 4.15 and 5.3 are available at https://libreswan.org/security/CVE-2026-14957/"}], "references": [{"url": "https://libreswan.org/security/CVE-2026-14957/CVE-2026-14957.txt", "name": "Libreswan Security Advisory CVE-2026-14957", "tags": ["vendor-advisory"]}, {"url": "https://libreswan.org/security/CVE-2026-14957/", "name": "Libreswan CVE-2026-14957 Patches", "tags": ["patch"]}], "workarounds": [{"lang": "en", "value": "No workaround is available unless one is willing to disable FIPS mode. If libreswan is only using PreSharedKey (PSK) authentication and the NSS database contains no CA certificates, CERT payloads are ignored and libreswan is not vulnerable."}], "x_generator": {"engine": "cvelib 1.8.0"}, "descriptions": [{"lang": "en", "value": "In FIPS mode, Libreswan's add_decoded_cert() function calls CERT_ExtractPublicKey() and asserts that the result is not NULL. However, CERT_ExtractPublicKey() returns NULL when public key extraction fails, for example if the RSA exponent is set to 0. A remote attacker can send a malformed X.509 certificate in a CERT payload to trigger the assertion, causing the pluto daemon to abort and restart. Continued exploitation causes a denial of service. No remote code execution is possible. Both IKEv1 and IKEv2 are affected. The vulnerability is only exploitable when both the OS and libreswan are running in FIPS mode and at least one CA certificate is loaded. The CERT payload is processed before peer authentication, so no credentials are needed to exploit this. Configurations using only PreSharedKey (PSK) authentication with no CA certificates loaded in the NSS database are not vulnerable."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-617", "description": "CWE-617: Reachable Assertion"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-252", "description": "CWE-252: Unchecked Return Value"}]}], "configurations": [{"lang": "en", "value": "Exploitation is only possible when both the OS and libreswan are running in FIPS mode and at least one CA certificate is loaded. Both IKEv1 and IKEv2 are vulnerable. Configurations using only PreSharedKey (PSK) authentication with no CA certificates in the NSS database are not vulnerable. Use 'sudo ipsec fipsstatus' to check FIPS mode and 'sudo ipsec listcacerts' to check for loaded CA certificates."}], "providerMetadata": {"orgId": "d42dc95b-23f1-4e06-9076-20753a0fb0df", "shortName": "libreswan", "dateUpdated": "2026-09-02T02:19:00.114Z"}, "taxonomyMappings": [{"taxonomyName": "ATT&CK", "taxonomyVersion": "15.1", "taxonomyRelations": [{"taxonomyId": "T1499.004", "relationshipName": "maps to", "relationshipValue": "Application or System Exploitation (DoS)"}]}]}}, "cveMetadata": {"cveId": "CVE-2026-14957", "state": "PUBLISHED", "dateUpdated": "2026-09-02T13:00:19.908Z", "dateReserved": "2026-07-07T13:39:23.932Z", "assignerOrgId": "d42dc95b-23f1-4e06-9076-20753a0fb0df", "datePublished": "2026-09-02T02:19:00.114Z", "assignerShortName": "libreswan"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"collectionURL": "https://github.com/libreswan/libreswan", "defaultStatus": "unaffected", "packageName": "libreswan", "product": "libreswan", "programRoutines": [{"name": "add_decoded_cert"}], "repo": "https://github.com/libreswan/libreswan", "vendor": "The Libreswan Project", "versions": [{"lessThanOrEqual": "5.3.1", "status": "affected", "version": "3.0", "versionType": "semver"}, {"status": "unaffected", "version": "5.3.2", "versionType": "semver"}]}], "source": "d42dc95b-23f1-4e06-9076-20753a0fb0df"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In FIPS mode, Libreswan's add_decoded_cert() function calls CERT_ExtractPublicKey() and asserts that the result is not NULL. However, CERT_ExtractPublicKey() returns NULL when public key extraction fails, for example if the RSA exponent is set to 0. A remote attacker can send a malformed X.509 certificate in a CERT payload to trigger the assertion, causing the pluto daemon to abort and restart. Continued exploitation causes a denial of service. No remote code execution is possible. Both IKEv1 and IKEv2 are affected. The vulnerability is only exploitable when both the OS and libreswan are running in FIPS mode and at least one CA certificate is loaded. The CERT payload is processed before peer authentication, so no credentials are needed to exploit this. Configurations using only PreSharedKey (PSK) authentication with no CA certificates loaded in the NSS database are not vulnerable."}], "id": "CVE-2026-14957", "lastModified": "2026-09-09T15:44:20.970", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "d42dc95b-23f1-4e06-9076-20753a0fb0df", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-14957", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-09-02T13:00:08.993590Z", "version": "2.0.3"}}]}, "published": "2026-09-02T03:16:47.490", "references": [{"source": "d42dc95b-23f1-4e06-9076-20753a0fb0df", "url": "https://libreswan.org/security/CVE-2026-14957/"}, {"source": "d42dc95b-23f1-4e06-9076-20753a0fb0df", "url": "https://libreswan.org/security/CVE-2026-14957/CVE-2026-14957.txt"}], "sourceIdentifier": "d42dc95b-23f1-4e06-9076-20753a0fb0df", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-252"}, {"lang": "en", "value": "CWE-617"}], "source": "d42dc95b-23f1-4e06-9076-20753a0fb0df", "type": "Secondary"}]}

{"bugzilla": {"description": "libreswan: badly formatted X.509 certificate can cause an assertion failure that crashes the daemon process", "id": "2501764", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2501764"}, "csaw": false, "cvss3": {"cvss3_base_score": "7.5", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-617", "details": ["No description is available for this CVE."], "mitigation": {"lang": "en:us", "value": "No mitigation is currently available that meets Red Hat Product Security's standards for usability, deployment, applicability, or stability. Customers are advised to apply the appropriate security updates once they become available."}, "name": "CVE-2026-14957", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:9::fastdatapath", "fix_state": "Affected", "package_name": "libreswan", "product_name": "Fast Datapath for RHEL 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Affected", "package_name": "libreswan", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Affected", "package_name": "libreswan", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Affected", "package_name": "libreswan", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Affected", "package_name": "libreswan", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Affected", "package_name": "libreswan", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Affected", "package_name": "libreswan", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Affected", "package_name": "rhcos", "product_name": "Red Hat OpenShift Container Platform 4"}], "public_date": "2026-07-15T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-14957\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-14957\nhttps://libreswan.org/security/CVE-2026-14957/\nhttps://libreswan.org/security/CVE-2026-14957/CVE-2026-14957.txt"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": null}], "enrichment": {"confidence": 75.0, "confidence_source": "inferred", "scores": [{"score": 75.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "product": "libreswan", "vendor": "libreswan"}], "created": "2026-07-21T20:45:03.168024+00:00", "updated": "2026-09-02T04:15:05.315588+00:00", "vendors": ["libreswan", "libreswan$PRODUCT$libreswan"]}