ROS-20230913-03

A vulnerability in libreswan software is related to a null pointer dereferencing error in the
IKEv1 fast mode packets. Exploitation of the vulnerability could allow an attacker,
remotely send specially crafted packets to the system and perform a denial-of-service attack.
denial-of-service attack.

The libreswan software vulnerability is related to a reachability assertion in the processing of
IKEv2 REKEY packets. Exploitation of the vulnerability could allow an attacker acting remotely,
to send specially crafted packets to the system and perform a denial of service attack.

A vulnerability in the libreswan software is related to insufficient validation of user input when processing IKEv1 IKEv1 packets.
when processing IKEv1 ISAKMP SA packets. Exploitation of the vulnerability could allow an attacker,
remotely send specially crafted input data to the system and perform a denial of service attack.
"denial-of-service attack.