There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - Libreswan, via the function RSA_authenticate_hash_signature_pkcs1_1_5_rsa(), did not correctly verify the
    DER encoding of the ASN.1 digest when the IKEv2 AUTH payload was encoded using RSASSA-PKCS1-v1_5 (RFC
    8017). A remote attacker can use a variation on the Bleichenbacher attack to forge the AUTH payload when
    small public exponents are used (e.g., e=3), leading to impersonation. Additionally, a remote attacker, by
    encoding a shorter than expected hash in the AUTH payload, could trigger an assertion leading to denial-
    of-service. The daemon aborts and restarts; continued exploitation causes sustained denial of service.
    Remote code execution is not possible. X.509 certificate verifications of the remote IKE peer are not
    affected. (CVE-2026-50722)

  - An invalidly formatted IKEv2 fragment causes the Libreswan pluto daemon to crash and restart. Continued
    exploitation would cause a denial of service. The function reassemble_v2_incoming_fragments() would ignore
    unknown outer payloads but still store these in a fixed size array msg_digest.digest[PAYLIMIT]. An off-by-
    one error in the assertion PASSERT(logger, md->digest_roof < elemsof(md->digest)) causes the daemon to
    abort. No remote code execution is possible. Any configuration that allows IKEv2 connections that do not
    set fragmentation=no are vulnerable. IKEv1 is not affected. (CVE-2026-12413)

  - In FIPS mode, Libreswan's add_decoded_cert() function calls CERT_ExtractPublicKey() and asserts that the
    result is not NULL. However, CERT_ExtractPublicKey() returns NULL when public key extraction fails, for
    example if the RSA exponent is set to 0. A remote attacker can send a malformed X.509 certificate in a
    CERT payload to trigger the assertion, causing the pluto daemon to abort and restart. Continued
    exploitation causes a denial of service. No remote code execution is possible. Both IKEv1 and IKEv2 are
    affected. The vulnerability is only exploitable when both the OS and libreswan are running in FIPS mode
    and at least one CA certificate is loaded. The CERT payload is processed before peer authentication, so no
    credentials are needed to exploit this. Configurations using only PreSharedKey (PSK) authentication with
    no CA certificates loaded in the NSS database are not vulnerable. (CVE-2026-14957)

  - Libreswan, via the function RSA_authenticate_hash_signature_raw_rsa(), did not correctly verify the length
    of the authentication hash when the SIG payload of an IKEv1 packet was encoded using PKCS #1 RSA
    Encryption as per RFC 2313. A remote attacker can use a variation on the Bleichenbacher attack to forge
    the SIG payload when small public exponents are being used (e.g., e=3), which could lead to impersonation.
    Additionally, a remote attacker, by encoding a shorter than expected hash in the SIG payload, could
    trigger an assertion leading to denial-of-service. The daemon aborts and restarts; continued exploitation
    causes sustained denial of service. Remote code execution is not possible. X.509 certificate verifications
    of remote IKE peers are not affected. (CVE-2026-50721)

AlmaLinux 9.2 主機已安裝的套件受到 TuxCare ALMALINUX9.2：CLSA-2026：1792158739 公告中提及的弱點影響。

  - Libreswan 在 IKE 憑證驗證的處理程式碼中 PKCS#7 有一個 null 指標解除參照錯誤。當 libreswan 解碼類型為 CERT_PKCS7_WRAPPED_X509 的 IKE CERT 承載時，它會使用 SEC_PKCS7ContainsCertsOrCrls（） 保護 PKCS#7 Blob，然後使用 SEC_PKCS7GetCertificateList（） 反覆運算憑證清單。兩個 NSS API 在攜帶 CRL 但沒有憑證的 SignedData 上存在分歧：ContainsCertsOrCrls（） 傳回 PR_TRUE （有 CRL），因此保護會傳遞，但 GetCertificateList（） 會傳回 NULL （沒有憑證）。這會導致 libreswan 取消參照 null 指標，進而導致當機並重新啟動。惡意IKE_AUTH封包可能會觸發此錯誤，這表示對等體不需要經過驗證。我們認為遠端程式碼執行不可能發生。持續利用可能會導致拒絕服務。（CVE-2026-77207）

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

AlmaLinux 9.2 主机上存在安装的程序包，该程序包受到 TuxCare ALMALINUX9.2：CLSA-2026：1792158739公告中提及的漏洞的影响。

  - Libreswan 在 IKE 证书认证的处理代码中 PKCS#7 存在空指针取消引用缺陷。当 libreswan 解码类型为 CERT_PKCS7_WRAPPED_X509 的 IKE CERT 负载时，会 PKCS#7 使用 SEC_PKCS7ContainsCertsOrCrls（） 保护 blob，然后使用 SEC_PKCS7GetCertificateList（） 迭代证书列表。两个 NSS API 对携带 CRL 但无证书的 SignedData 存在分歧：ContainsCertsOrCrls（） 返回 PR_TRUE（存在 CRL），因此防护传递，但 GetCertificateList（） 返回 NULL（无证书）。这会导致 libreswan 取消引用空指针，从而造成崩溃和重新启动。恶意 IKE_AUTH 数据包可触发此缺陷，意味着对等机不需要经过认证。我们认为远程代码执行不可能发生。持续利用可造成拒绝服务。（CVE-2026-77207）

请注意，Nessus 尚未测试此问题，而是只依据应用程序自我报告的版本号进行判断。

AlmaLinux 9.2 ホストには、TuxCare ALMALINUX9.2:CLSA-2026:1792158739アドバイザリに記載されている脆弱性の影響を受けるパッケージがインストールされています。

  - Libreswan の IKE 証明書認証の PKCS#7 処理コードに NULL ポインターデリファレンスのバグがあります。libreswan は、タイプ CERT_PKCS7_WRAPPED_X509 の IKE CERT ペイロードをデコードするときに、SEC_PKCS7ContainsCertsOrCrls() で PKCS#7 blob を保護してから、SEC_PKCS7GetCertificateList() で証明書リストを反復します。2 つの NSS API は、CRL を運ぶが証明書を持たない SignedData について意見が一致しません:ContainsCertsOrCrls() は PR_TRUE を返すので (CRL はある)、ガードは渡されますが、GetCertificateList() は NULL を返します (証明書がありません)。これにより、libreswan は null ポインターを逆参照し、クラッシュおよび再起動が発生します。悪意のあるIKE_AUTHパケットがこのバグを発生させる可能性があり、ピアを認証する必要がないことを意味します。リモートでコードが実行されることはありません。悪用が続くと、サービス拒否が引き起こされる可能性があります。(CVE-2026-77207)

Nessus はこの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792158739 advisory.

  - Libreswan has a null pointer dereference bug in the PKCS#7 handling code for IKE certificate     authentication. When libreswan decodes an IKE CERT payload of type CERT_PKCS7_WRAPPED_X509, it guards the     PKCS#7 blob with SEC_PKCS7ContainsCertsOrCrls() and then iterates the certificate list with     SEC_PKCS7GetCertificateList(). The two NSS APIs disagree on a SignedData that carries a CRL but no     certificates: ContainsCertsOrCrls() returns PR_TRUE (there is a CRL), so the guard passes, but     GetCertificateList() returns NULL (there are no certificates). This causes libreswan to dereference a null     pointer leading to a crash and restart. A malicious IKE_AUTH packet can trigger this bug, meaning the peer     does not need to be authenticated. No remote code execution is possible. Continued exploitation can cause     a denial of service. (CVE-2026-77207)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
473834	Alpine: multiple libreswan packages: security update to 5.3.3-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	2026/10/8	2026/10/8	medium
473834	Alpine: multiple libreswan packages: security update to 5.3.3-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	2026/10/8	2026/10/8	medium
366645	AlmaLinux 9.2 [TuxCare] 安全性更新：libreswan （ALMALINUX9.2：CLSA-2026：1792158739）	Nessus	Alma Linux Local Security Checks	2026/10/16	2026/10/16	high
366645	AlmaLinux 9.2 [TuxCare] 安全更新：libreswan （ALMALINUX9.2：CLSA-2026：1792158739）	Nessus	Alma Linux Local Security Checks	2026/10/16	2026/10/16	high
366645	AlmaLinux 9.2 [TuxCare] セキュリティ更新: libreswan (ALMALINUX9.2:CLSA-2026:1792158739)	Nessus	Alma Linux Local Security Checks	2026/10/16	2026/10/16	high
366645	AlmaLinux 9.2 [TuxCare] Security Update: libreswan (ALMALINUX9.2:CLSA-2026:1792158739)	Nessus	Alma Linux Local Security Checks	2026/10/16	2026/10/16	high

検出

プラグインの検索

medium

medium

high

high

high

high