696 matches found
The vulnerability of the VPN protocol library using “IPsec” in libreswan, related to the possibility of successful exploitation, allows an attacker to perform a type of attack known as “denial-of-service attack”.
The vulnerability of the VPN protocol using “IPsec” with libreswan is related to a flaw in the processing of IKEv2 REKEY packets. Exploiting this vulnerability allows an attacker operating remotely to perform a type of attack known as a “denial-of-service” attack...
CVE-2023-38712
An issue was discovered in Libreswan 3.x and 4.x before 4.12. When an IKEv1 ISAKMP SA Informational Exchange packet contains a Delete/Notify payload followed by further Notifies that act on the ISAKMP SA, such as a duplicated Delete/Notify message, a NULL pointer dereference on the deleted state...
AZL-28065 CVE-2023-38711 affecting package libreswan for versions less than 4.7-5
An issue was discovered in Libreswan before 4.12. When an IKEv1 Quick Mode connection configured with IDIPV4ADDR or IDIPV6ADDR receives an IDcr payload with IDFQDN, a NULL pointer dereference causes a crash and restart of the pluto daemon. NOTE: the earliest affected version is 4.6...
AZL-28066 CVE-2023-38712 affecting package libreswan for versions less than 4.7-5
An issue was discovered in Libreswan 3.x and 4.x before 4.12. When an IKEv1 ISAKMP SA Informational Exchange packet contains a Delete/Notify payload followed by further Notifies that act on the ISAKMP SA, such as a duplicated Delete/Notify message, a NULL pointer dereference on the deleted state...
Libreswan 代码问题漏洞
Libreswan is an IPsec implementation similar to Openswan, which is primarily used to ensure security, integrity issues in data transmission. A security vulnerability exists in Libreswan versions prior to 4.12 that originates when an IKEv1 Quick Mode connection using IDIPV4ADDR or IDIPV6ADDR is...
PT-2023-5263 · Libreswan +5 · Libreswan +5
Name of the Vulnerable Software and Affected Versions: Libreswan versions 3.x and 4.x before 4.12 Description: An issue was discovered in Libreswan when an IKEv1 ISAKMP SA Informational Exchange packet contains a Delete/Notify payload followed by further Notifies that act on the ISAKMP SA, such a...
Microsoft Windows Multiple Vulnerabilities (KB5025239)
This host is missing an important security update according to Microsoft KB5025239 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
The vulnerability of the IKE protocol implementation in real-time operating systems like Wind River VxWorks allows attackers to trigger service failures or gain access to confidential information.
The vulnerability of the IKE protocol implementation in real-time operating systems like Wind River VxWorks relates to reading beyond the boundary. Exploiting this vulnerability can allow a malicious actor to cause service failures or gain access to confidential information...
OESA-2023-1318 libreswan security update
Libreswan is an implementation of IKEv1 and IKEv2 for IPsec. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks. Everything passing through the...
UBUNTU-CVE-2023-30570
pluto in Libreswan before 4.11 allows a denial of service responder SPI mishandling and daemon crash via unauthenticated IKEv1 Aggressive Mode packets. The earliest affected version is 3.28...
CVE-2023-2295
A vulnerability was found in the libreswan library. This security issue occurs when an IKEv1 Aggressive Mode packet is received with only unacceptable crypto algorithms, and the response packet is not sent with a zero responder SPI. When a subsequent packet is received where the sender reuses the...
libreswan: Malicious IKEv1 Aggressive Mode packets can crash libreswan
A vulnerability was found in the libreswan library. This security issue occurs when an IKEv1 Aggressive Mode packet is received with only unacceptable crypto algorithms, and the response packet is not sent with a zero responder SPI. When a subsequent packet is received where the sender reuses the...
libreswan: Malicious IKEv1 Aggressive Mode packets can crash libreswan
A vulnerability was found in the libreswan library. This security issue occurs when an IKEv1 Aggressive Mode packet is received with only unacceptable crypto algorithms, and the response packet is not sent with a zero responder SPI. When a subsequent packet is received where the sender reuses the...
libreswan: Malicious IKEv1 Aggressive Mode packets can crash libreswan
A vulnerability was found in the libreswan library. This security issue occurs when an IKEv1 Aggressive Mode packet is received with only unacceptable crypto algorithms, and the response packet is not sent with a zero responder SPI. When a subsequent packet is received where the sender reuses the...
libreswan: Malicious IKEv1 Aggressive Mode packets can crash libreswan
A vulnerability was found in the libreswan library. This security issue occurs when an IKEv1 Aggressive Mode packet is received with only unacceptable crypto algorithms, and the response packet is not sent with a zero responder SPI. When a subsequent packet is received where the sender reuses the...
The vulnerability in the implementation of the Internet Key Exchange (IKE) protocol in Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the Internet Key Exchange IKE protocol implementation in Windows operating systems is related to synchronization errors when using a common resource. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
CVE-2023-28238
Windows Internet Key Exchange IKE Protocol Extensions Remote Code Execution Vulnerability...
CVE-2023-28238
Windows Internet Key Exchange IKE Protocol Extensions Remote Code Execution Vulnerability...
