Read the docs
TI-2023-02152 Aliases CVE-2023-2295GHSA-gcrh-c42h-m2vw

Uncontrolled resource consumption in libreswan

Priority MEDIUM 42CWE-400Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and Red Hat. Impact type from CWE-400.

Summary

A vulnerability was found in the libreswan library. This security issue occurs when an IKEv1 Aggressive Mode packet is received with only unacceptable crypto algorithms, and the response packet is not sent with a zero responder SPI. When a subsequent packet is received where the sender reuses the libreswan responder SPI as its own initiator SPI, the pluto daemon state machine crashes. No remote code execution is possible. This CVE exists because of a CVE-2023-30570 security regression for libreswan package in Red Hat Enterprise Linux 8.8 and Red Hat Enterprise Linux 9.2.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01581 75th percentileScored 2026-11-07
Fix Fixed Red Hat: 3 advisories

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
—libreswanAffects libreswan v4.9-1.el8 and libreswan v4.9-1.el9, Fixed in libreswan v4.9-3.el8_8 and libreswan v4.9-4.el9_2—No fix listedCNA
  • libreswan Vendor— Affected Affects libreswan v4.9-1.el8 and libreswan v4.9-1.el9, Fixed in libreswan v4.9-3.el8_8 and libreswan v4.9-4.el9_2 Fixed in — No fix listed CNA

CPE configurations NVD · 9

CPEVersionsRoleVendor
cpe:2.3:a:libreswan:libreswan:4.9-1.el8:*:*:*:*:*:*:*4.9-1.el8VulnerableThe Libreswan Project
cpe:2.3:a:libreswan:libreswan:4.9-1.el9:*:*:*:*:*:*:*4.9-1.el9VulnerableThe Libreswan Project
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*8.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*9.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_eus:8.8:*:*:*:*:*:*:*8.8VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_eus:9.2:*:*:*:*:*:*:*9.2VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:8.8:*:*:*:*:*:*:*8.8VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:9.2:*:*:*:*:*:*:*9.2VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_tus:8.8:*:*:*:*:*:*:*8.8VulnerableRed Hat
  • cpe:2.3:a:libreswan:libreswan:4.9-1.el8:*:*:*:*:*:*:* Versions 4.9-1.el8 Vulnerable ·The Libreswan Project
  • cpe:2.3:a:libreswan:libreswan:4.9-1.el9:*:*:*:*:*:*:* Versions 4.9-1.el9 Vulnerable ·The Libreswan Project
  • cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_eus:8.8:*:*:*:*:*:*:* Versions 8.8 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_eus:9.2:*:*:*:*:*:*:* Versions 9.2 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:8.8:*:*:*:*:*:*:* Versions 8.8 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:9.2:*:*:*:*:*:*:* Versions 9.2 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_tus:8.8:*:*:*:*:*:*:* Versions 8.8 Vulnerable ·Red Hat

Remediation

Red Hat 3 advisories

  • RHSA-2024:10594 Released 2024-12-02 · Red Hat rating Moderate
    libreswan security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.0) libreswan-4.6-3.el9_0.3
  • RHSA-2023:3148 Released 2023-05-16 · Red Hat rating Important
    libreswan security update
    • Red Hat Enterprise Linux AppStream (v. 9) libreswan-4.9-4.el9_2
  • RHSA-2023:3107 Released 2023-05-16 · Red Hat rating Important
    libreswan security update
    • Red Hat Enterprise Linux AppStream (v. 8) libreswan-4.9-3.el8_8

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2023:3107
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2023:3148
Red Hat Enterprise Linux AppStream E4S (v.9.0)Fixed RHSA-2024:10594
Red Hat OpenShift Container Platform 4.15Fixed—
Red Hat OpenShift Container Platform 4.16Fixed—
Red Hat OpenShift Container Platform 4.17Fixed—
Not affected: 3 products
  • Red Hat Enterprise Linux 6
  • Red Hat Enterprise Linux 7
  • Red Hat OpenShift Container Platform 4.17

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-2295
  2. 2026-10-03 Alias added: GHSA-gcrh-c42h-m2vw

References

Advisory 3

Other 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences