Lucene search
RedHatRHSA-2023:3095HistoryMay 16, 2023 - 9:15 a.m.
(RHSA-2023:3095) Moderate: libreswan security and bug fix update
2023-05-1609:15:19
access.redhat.com
5
libreswan
ipsec
ike
security
encryption
authentication
vpn
dos
cve
bug fix
fips policy
0.001 Low
EPSS
Percentile
48.7%
Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network (VPN).
Security Fix(es):
- libreswan: remote DoS via crafted TS payload with an incorrect selector length (CVE-2023-23009)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
- authby=rsasig fails in FIPS policy (BZ#2187647)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 8 | ppc64le | libreswan | < 4.9-2.el8_8.2 | libreswan-4.9-2.el8_8.2.ppc64le.rpm |
| RedHat | 8 | aarch64 | libreswan-debuginfo | < 4.9-2.el8_8.2 | libreswan-debuginfo-4.9-2.el8_8.2.aarch64.rpm |
| RedHat | 8 | s390x | libreswan-debuginfo | < 4.9-2.el8_8.2 | libreswan-debuginfo-4.9-2.el8_8.2.s390x.rpm |
| RedHat | 8 | x86_64 | libreswan | < 4.9-2.el8_8.2 | libreswan-4.9-2.el8_8.2.x86_64.rpm |
| RedHat | 8 | s390x | libreswan-debugsource | < 4.9-2.el8_8.2 | libreswan-debugsource-4.9-2.el8_8.2.s390x.rpm |
| RedHat | 8 | ppc64le | libreswan-debugsource | < 4.9-2.el8_8.2 | libreswan-debugsource-4.9-2.el8_8.2.ppc64le.rpm |
| RedHat | 8 | aarch64 | libreswan-debugsource | < 4.9-2.el8_8.2 | libreswan-debugsource-4.9-2.el8_8.2.aarch64.rpm |
| RedHat | 8 | s390x | libreswan | < 4.9-2.el8_8.2 | libreswan-4.9-2.el8_8.2.s390x.rpm |
| RedHat | 8 | x86_64 | libreswan-debuginfo | < 4.9-2.el8_8.2 | libreswan-debuginfo-4.9-2.el8_8.2.x86_64.rpm |
| RedHat | 8 | x86_64 | libreswan-debugsource | < 4.9-2.el8_8.2 | libreswan-debugsource-4.9-2.el8_8.2.x86_64.rpm |
Related
ubuntucve
ubuntucve
CVE-2023-23009
2023-02-21 00:00:00
debian
debian
[SECURITY] [DSA 5368-1] libreswan security update
2023-03-03 19:58:43
nessus
nessus
AlmaLinux 9 : libreswan (ALSA-2023:2633)
2023-05-14 00:00:00
Fedora 38 : libreswan (2023-a2348480cb)
2023-04-24 00:00:00
AlmaLinux 8 : libreswan (ALSA-2023:3095)
2023-05-19 00:00:00
oraclelinux
oraclelinux
libreswan security update
2023-05-17 00:00:00
libreswan security and bug fix update
2023-05-24 00:00:00
redhat
redhat
(RHSA-2023:2633) Moderate: libreswan security update
2023-05-09 10:14:07
osv
osv
CVE-2023-23009
2023-02-21 16:15:11
Moderate: libreswan security update
2023-05-09 00:00:00
libreswan - security update
2023-03-03 00:00:00
openvas
openvas
Fedora: Security Advisory for libreswan (FEDORA-2023-42ec148952)
2023-04-23 00:00:00
Fedora: Security Advisory for libreswan (FEDORA-2023-a2348480cb)
2023-04-23 00:00:00
Mageia: Security Advisory (MGASA-2023-0089)
2023-03-28 00:00:00
debiancve
debiancve
CVE-2023-23009
2023-02-21 16:15:11
veracode
veracode
Denial Of Service (DoS)
2023-02-25 21:19:46
redhatcve
redhatcve
CVE-2023-23009
2023-02-27 12:29:29
prion
prion
Code injection
2023-02-21 16:15:00
nvd
nvd
CVE-2023-23009
2023-02-21 16:15:11
almalinux
almalinux
Moderate: libreswan security and bug fix update
2023-05-16 00:00:00
Moderate: libreswan security update
2023-05-09 00:00:00
fedora
fedora
[SECURITY] Fedora 37 Update: libreswan-4.10-1.fc37
2023-04-22 21:48:10
[SECURITY] Fedora 38 Update: libreswan-4.10-1.fc38
2023-04-22 22:23:16
[SECURITY] Fedora 36 Update: libreswan-4.11-1.fc36
2023-05-13 01:21:01
alpinelinux
alpinelinux
CVE-2023-23009
2023-02-21 16:15:11
cve
cve
CVE-2023-23009
2023-02-21 16:15:11
mageia
mageia
Updated libreswan packages fix security vulnerability
2023-03-11 22:00:39
cvelist
cvelist
CVE-2023-23009
2023-02-21 00:00:00