Lucene search

K
redosRedosROS-20240423-04
HistoryApr 23, 2024 - 12:00 a.m.

ROS-20240423-04

2024-04-2300:00:00
redos.red-soft.ru
2
libreswan
vulnerability
remote attackers
denial-of-service
ikev2
presharedkeys
unix

6.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.6%

A vulnerability in the libreswan software is related to the fact that in some IKEv2 scenarios
retransmit a connection configured to use PreSharedKeys (authby=secret) and this connection fails to
can’t find the corresponding customized secret. Exploiting the vulnerability could allow an attacker,
acting remotely, to send specially crafted packets to the system and perform a denial-of-service attack.
denial-of-service attack.

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64libreswan<= 4.14-1UNKNOWN