Red Hat Security AdvisoryRHSA-2023:2124
libreswan security update
Released 2023-05-04 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream AUS (v. 8.2) libreswan-3.29-7.el8_2.2
- Red Hat Enterprise Linux AppStream E4S (v. 8.2) libreswan-3.29-7.el8_2.2
- Red Hat Enterprise Linux AppStream TUS (v. 8.2) libreswan-3.29-7.el8_2.2
Fixes 1 record
Priority MEDIUM 41
pluto in Libreswan before 4.11 allows a denial of service (responder SPI mishandling and daemon crash) via unauthenticated IKEv1 Aggressive Mode packets.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01185 · Published 2023-05-28 · Partial fix CWE-400
