CVE-2023-23009

Libreswan 4.9 allows remote attackers to cause a denial of service (assert failure and daemon restart) via crafted TS payload with an incorrect select...

Original description

The description as published by the source.

Libreswan 4.9 allows remote attackers to cause a denial of service (assert failure and daemon restart) via crafted TS payload with an incorrect selector length.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2023-23009 libreswan Fixed in: 4.3-1+deb11u3
Ubuntu UBUNTU-CVE-2023-23009 libreswan

References

advisory github.com
advisory lists.fedoraproject.org
advisory lists.fedoraproject.org
advisory nvd.nist.gov
advisory debian.org
report github.com