Lucene search
MitreCVELIST:CVE-2023-38710HistoryAug 25, 2023 - 12:00 a.m.
CVE-2023-38710
2023-08-2500:00:00
mitre
raw.githubusercontent.com
1
libreswan
crash
restart
invalid ipsec protocol id
ikev2 child sa
rekey
invalid_spi
notify payload's protocol id
verify outgoing packets
esp
ah
pluto daemon
earliest affected version 3.20
An issue was discovered in Libreswan before 4.12. When an IKEv2 Child SA REKEY packet contains an invalid IPsec protocol ID number of 0 or 1, an error notify INVALID_SPI is sent back. The notify payload’s protocol ID is copied from the incoming packet, but the code that verifies outgoing packets fails an assertion that the protocol ID must be ESP (2) or AH(3) and causes the pluto daemon to crash and restart. NOTE: the earliest affected version is 3.20.
Related
ubuntucve
ubuntucve
CVE-2023-38710
2023-08-25 00:00:00
veracode
veracode
Denial Of Service (DoS)
2023-08-21 06:00:35
cbl_mariner
cbl_mariner
CVE-2023-38710 affecting package libreswan for versions less than 4.7-5
2023-09-13 02:10:38
CVE-2023-38710 affecting package libreswan for versions less than 4.7-6
2024-03-19 17:21:46
debiancve
debiancve
CVE-2023-38710
2023-08-25 21:15:08
osv
osv
CVE-2023-38710
2023-08-25 21:15:08
Moderate: libreswan security update
2023-11-07 00:00:00
Moderate: libreswan security update
2023-11-14 00:00:00
cve
cve
CVE-2023-38710
2023-08-25 21:15:08
redhatcve
redhatcve
CVE-2023-38710
2023-08-09 05:49:30
prion
prion
Code injection
2023-08-25 21:15:00
alpinelinux
alpinelinux
CVE-2023-38710
2023-08-25 21:15:08
nessus
nessus
CentOS 8 : libreswan (CESA-2023:7052)
2023-11-14 00:00:00
RHEL 9 : libreswan (RHSA-2023:6549)
2023-11-07 00:00:00
Fedora 37 : libreswan (2023-dbc6d8a124)
2023-08-20 00:00:00
redos
redos
ROS-20230913-03
2023-09-13 00:00:00
almalinux
almalinux
Moderate: libreswan security update
2023-11-14 00:00:00
Moderate: libreswan security update
2023-11-07 00:00:00
redhat
redhat
(RHSA-2023:7052) Moderate: libreswan security update
2023-11-14 08:43:55
(RHSA-2023:6549) Moderate: libreswan security update
2023-11-07 06:08:30
oraclelinux
oraclelinux
libreswan security update
2023-11-17 00:00:00
libreswan security update
2023-11-11 00:00:00
fedora
fedora
[SECURITY] Fedora 38 Update: libreswan-4.12-1.fc38
2023-08-20 00:49:12
[SECURITY] Fedora 37 Update: libreswan-4.12-1.fc37
2023-08-20 00:45:09
openvas
openvas
Fedora: Security Advisory for libreswan (FEDORA-2023-ddd6e6b49b)
2023-08-20 00:00:00
Fedora: Security Advisory for libreswan (FEDORA-2023-dbc6d8a124)
2023-08-20 00:00:00
Mageia: Security Advisory (MGASA-2024-0085)
2024-04-05 00:00:00
mageia
mageia
Updated libreswan packages fix security vulnerabilities
2024-03-24 07:57:19