Lucene search

K
vulnrichmentMitreVULNRICHMENT:CVE-2023-38711
HistoryAug 25, 2023 - 12:00 a.m.

CVE-2023-38711

2023-08-2500:00:00
mitre
github.com
5
libreswan
ikev1
idcr_payload

AI Score

6.8

Confidence

Low

EPSS

0.001

Percentile

30.7%

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

An issue was discovered in Libreswan before 4.12. When an IKEv1 Quick Mode connection configured with ID_IPV4_ADDR or ID_IPV6_ADDR receives an IDcr payload with ID_FQDN, a NULL pointer dereference causes a crash and restart of the pluto daemon. NOTE: the earliest affected version is 4.6.

AI Score

6.8

Confidence

Low

EPSS

0.001

Percentile

30.7%

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial