{"api_version":"1","generated_at":"2026-10-24T04:35:45+00:00","cve":"CVE-2026-77205","urls":{"html":"https://cve.report/CVE-2026-77205","api":"https://cve.report/api/cve/CVE-2026-77205.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2026-77205","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-77205"},"summary":{"title":"Denial of Service via sending bogus X.509 certificates","description":"Libreswan in FIPS mode has a vulnerability where badly formed received certificates are rejected, but not deleted from the NSS cache. As a result, any real certificates with the same serial number are rejected as well. This can be abused to lock out legitimate peers from connecting. The add_decoded_cert() function missed a call to CERT_DestroyCertificate() due to an incorrect fix for CVE-2026-14957. Sending bogus certificates with new serial numbers could prevent the real certificates with those serial numbers from connecting until the service has restarted.","state":"PUBLISHED","assigner":"libreswan","published_at":"2026-10-13 22:18:24","updated_at":"2026-10-16 19:55:59"},"problem_types":["CWE-772","CWE-772 CWE-772: Missing Release of Resource after Effective Lifetime"],"metrics":[{"version":"3.1","source":"d42dc95b-23f1-4e06-9076-20753a0fb0df","type":"Secondary","score":"3.7","severity":"LOW","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","data":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":3.7,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"}},{"version":"3.1","source":"CNA","type":"CVSS","score":"3.7","severity":"LOW","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","data":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":3.7,"baseSeverity":"LOW","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","version":"3.1"}}],"references":[{"url":"https://libreswan.org/security/CVE-2026-14957/CVE-2026-14957.txt","name":"https://libreswan.org/security/CVE-2026-14957/CVE-2026-14957.txt","refsource":"d42dc95b-23f1-4e06-9076-20753a0fb0df","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://libreswan.org/security/CVE-2026-77205/","name":"https://libreswan.org/security/CVE-2026-77205/","refsource":"d42dc95b-23f1-4e06-9076-20753a0fb0df","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://libreswan.org/security/CVE-2026-77205/CVE-2026-77205.txt","name":"https://libreswan.org/security/CVE-2026-77205/CVE-2026-77205.txt","refsource":"d42dc95b-23f1-4e06-9076-20753a0fb0df","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-77205","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-77205","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"The Libreswan Project","product":"libreswan","version":"affected 5.3 5.3.2 semver","platforms":[]},{"source":"CNA","vendor":"The Libreswan Project","product":"libreswan","version":"unaffected 5.3.3 semver","platforms":[]}],"timeline":[{"source":"CNA","time":"2026-07-30T00:00:00.000Z","lang":"en","value":"Libreswan was notified of the issue via security@libreswan.org"},{"source":"CNA","time":"2026-09-24T00:00:00.000Z","lang":"en","value":"Advanced notice given to supported customers and distributions"},{"source":"CNA","time":"2026-10-05T00:00:00.000Z","lang":"en","value":"Public announcement and release of libreswan 5.3.3"}],"solutions":[{"source":"CNA","title":"","value":"Upgrade to libreswan 5.3.3 or later. Patches are available at https://libreswan.org/security/CVE-2026-77205/","time":"","lang":"en"}],"workarounds":[{"source":"CNA","title":"","value":"Disabling FIPS mode will prevent this attack vector. If this is not possible, upgrade to a later libreswan version or apply the available patch.","time":"","lang":"en"}],"exploits":[{"source":"CNA","title":"","value":"No known exploitation in the wild. An attacker could trick a peer into connecting to them first to learn the serial number, then use that to prevent the peer from connecting to the legitimate server. Exploitation requires FIPS mode to be enabled.","time":"","lang":"en"}],"credits":[{"source":"CNA","value":"Wojciech Tatarski (TuxCare)","lang":"en"}],"nvd_cpes":[],"vendor_comments":[],"enrichments":{"kev":null,"epss":{"cve_year":"2026","cve_id":"77205","cve":"CVE-2026-77205","epss":"0.001830000","percentile":"0.073620000","score_date":"2026-10-16","updated_at":"2026-10-17 00:14:15"},"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"metrics":[{"other":{"content":{"id":"CVE-2026-77205","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-10-16T15:14:28.040688Z","version":"2.0.3"},"type":"ssvc"}}],"providerMetadata":{"dateUpdated":"2026-10-16T15:31:54.457Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"collectionURL":"https://github.com/libreswan/libreswan","defaultStatus":"unaffected","packageName":"libreswan","product":"libreswan","programRoutines":[{"name":"add_decoded_cert"}],"repo":"https://github.com/libreswan/libreswan","vendor":"The Libreswan Project","versions":[{"lessThanOrEqual":"5.3.2","status":"affected","version":"5.3","versionType":"semver"},{"status":"unaffected","version":"5.3.3","versionType":"semver"}]}],"configurations":[{"lang":"en","value":"Only configurations running in FIPS mode are vulnerable. Verify FIPS mode and loaded CA certificates with 'sudo ipsec fipsstatus' and 'sudo ipsec listcacerts'."}],"credits":[{"lang":"en","type":"finder","value":"Wojciech Tatarski (TuxCare)"}],"descriptions":[{"lang":"en","value":"Libreswan in FIPS mode has a vulnerability where badly formed received certificates are rejected, but not deleted from the NSS cache. As a result, any real certificates with the same serial number are rejected as well. This can be abused to lock out legitimate peers from connecting. The add_decoded_cert() function missed a call to CERT_DestroyCertificate() due to an incorrect fix for CVE-2026-14957. Sending bogus certificates with new serial numbers could prevent the real certificates with those serial numbers from connecting until the service has restarted."}],"exploits":[{"lang":"en","value":"No known exploitation in the wild. An attacker could trick a peer into connecting to them first to learn the serial number, then use that to prevent the peer from connecting to the legitimate server. Exploitation requires FIPS mode to be enabled."}],"impacts":[{"descriptions":[{"lang":"en","value":"Denial of service by preventing legitimate peers from connecting through cache poisoning with bogus certificates"}]}],"metrics":[{"cvssV3_1":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":3.7,"baseSeverity":"LOW","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]},{"other":{"content":{"description":"Vendor-assessed severity: Low. Exploitation requires FIPS mode to be enabled and either guessing or learning certificate serial numbers. Certificate Authorities should use randomized serial numbers per best practice.","value":"LOW"},"type":"vendorSeverity"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-772","description":"CWE-772: Missing Release of Resource after Effective Lifetime","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-10-13T21:28:03.390Z","orgId":"d42dc95b-23f1-4e06-9076-20753a0fb0df","shortName":"libreswan"},"references":[{"name":"Libreswan Security Advisory CVE-2026-77205","tags":["vendor-advisory"],"url":"https://libreswan.org/security/CVE-2026-77205/CVE-2026-77205.txt"},{"name":"Libreswan CVE-2026-77205 Patches","tags":["patch"],"url":"https://libreswan.org/security/CVE-2026-77205/"},{"name":"Related: CVE-2026-14957 (incorrect fix being corrected)","tags":["related"],"url":"https://libreswan.org/security/CVE-2026-14957/CVE-2026-14957.txt"}],"solutions":[{"lang":"en","value":"Upgrade to libreswan 5.3.3 or later. Patches are available at https://libreswan.org/security/CVE-2026-77205/"}],"source":{"defects":["CVE-2026-77205"],"discovery":"EXTERNAL"},"taxonomyMappings":[{"taxonomyName":"ATT&CK","taxonomyRelations":[{"relationshipName":"maps to","relationshipValue":"Application or System Exploitation (DoS)","taxonomyId":"T1499.004"}],"taxonomyVersion":"15.1"}],"timeline":[{"lang":"en","time":"2026-07-30T00:00:00.000Z","value":"Libreswan was notified of the issue via security@libreswan.org"},{"lang":"en","time":"2026-09-24T00:00:00.000Z","value":"Advanced notice given to supported customers and distributions"},{"lang":"en","time":"2026-10-05T00:00:00.000Z","value":"Public announcement and release of libreswan 5.3.3"}],"title":"Denial of Service via sending bogus X.509 certificates","workarounds":[{"lang":"en","value":"Disabling FIPS mode will prevent this attack vector. If this is not possible, upgrade to a later libreswan version or apply the available patch."}],"x_generator":{"engine":"cvelib 1.8.0"}}},"cveMetadata":{"assignerOrgId":"d42dc95b-23f1-4e06-9076-20753a0fb0df","assignerShortName":"libreswan","cveId":"CVE-2026-77205","datePublished":"2026-10-13T21:28:03.390Z","dateReserved":"2026-08-20T18:13:09.377Z","dateUpdated":"2026-10-16T15:31:54.457Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2026-10-13 22:18:24","lastModifiedDate":"2026-10-16 19:55:59","problem_types":["CWE-772","CWE-772 CWE-772: Missing Release of Resource after Effective Lifetime"],"metrics":{"cvssMetricV31":[{"source":"d42dc95b-23f1-4e06-9076-20753a0fb0df","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":3.7,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":2.2,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-10-16T15:14:28.040688Z","id":"CVE-2026-77205","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"configurations":[]},"legacy_mitre":{"record":{"CveYear":"2026","CveId":"77205","Ordinal":"1","Title":"Denial of Service via sending bogus X.509 certificates","CVE":"CVE-2026-77205","Year":"2026"},"notes":[{"CveYear":"2026","CveId":"77205","Ordinal":"1","NoteData":"Libreswan in FIPS mode has a vulnerability where badly formed received certificates are rejected, but not deleted from the NSS cache. As a result, any real certificates with the same serial number are rejected as well. This can be abused to lock out legitimate peers from connecting. The add_decoded_cert() function missed a call to CERT_DestroyCertificate() due to an incorrect fix for CVE-2026-14957. Sending bogus certificates with new serial numbers could prevent the real certificates with those serial numbers from connecting until the service has restarted.","Type":"Description","Title":"Denial of Service via sending bogus X.509 certificates"}]}}}