https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-19T08:42:41.442961+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-77205 fkie_cve-2026-77205 2026-10-19T08:42:41.444570+00:00

Libreswan in FIPS mode has a vulnerability where badly formed received certificates are rejected, but not deleted from the NSS cache. As a result, any real certificates with the same serial number are rejected as well. This can be abused to lock out legitimate peers from connecting. The add_decoded_cert() function missed a call to CERT_DestroyCertificate() due to an incorrect fix for CVE-2026-14957. Sending bogus certificates with new serial numbers could prevent the real certificates with those serial numbers from connecting until the service has restarted.

 https://db.gcve.eu/vuln/ghsa-7m29-c28j-rg7h GHSA-7m29-c28j-rg7h 2026-10-19T08:42:41.444636+00:00

Libreswan in FIPS mode has a vulnerability where badly formed received certificates are rejected, but not deleted from the NSS cache. As a result, any real certificates with the same serial number are rejected as well. This can be abused to lock out legitimate peers from connecting. The add_decoded_cert() function missed a call to CERT_DestroyCertificate() due to an incorrect fix for CVE-2026-14957. Sending bogus certificates with new serial numbers could prevent the real certificates with those serial numbers from connecting until the service has restarted.

 https://db.gcve.eu/vuln/ubuntu-cve-2026-77205 UBUNTU-CVE-2026-77205 2026-10-19T08:42:41.444657+00:00

Affected: Ubuntu:18.04:LTS: libreswan, Ubuntu:20.04:LTS: libreswan, Ubuntu:22.04:LTS: libreswan, Ubuntu:24.04:LTS: libreswan, Ubuntu:26.10: libreswan, Ubuntu:26.04:LTS: libreswan

Libreswan in FIPS mode has a vulnerability where badly formed received certificates are rejected, but not deleted from the NSS cache. As a result, any real certificates with the same serial number are rejected as well. This can be abused to lock out legitimate peers from connecting. The add_decoded_cert() function missed a call to CERT_DestroyCertificate() due to an incorrect fix for CVE-2026-14957. Sending bogus certificates with new serial numbers could prevent the real certificates with those serial numbers from connecting until the service has restarted.