Unrated

pluto in Libreswan before 4.11 allows a denial of service (responder SPI mishandling and daemon crash) via unauthenticated IKEv1 Aggressive Mode packe...

CVE-2023-30570 First seen on SecPulse May 28, 2023

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2023-30570 libreswan Fixed in: 4.3-1+deb11u4
Ubuntu UBUNTU-CVE-2023-30570 libreswan

Original description The description as published by the source.

pluto in Libreswan before 4.11 allows a denial of service (responder SPI mishandling and daemon crash) via unauthenticated IKEv1 Aggressive Mode packets. The earliest affected version is 3.28.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
web libreswan.org

Key facts

Severity: Unrated
Published: May 28, 2023
First seen on SecPulse: May 28, 2023

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:58