Important: libreswan security update
Summary
ALSA-2023:2122: Important: libreswan security update. Affects libreswan versions < 4.5-1.el8_7.1. Fixed in 4.5-1.el8_7.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network (VPN).
Vulnerability Detail
A vulnerability has been discovered in libreswan that allows malicious IKEv1 Aggressive Mode packets to crash the software. This vulnerability is identified as CVE-2023-30570. An attacker can exploit this vulnerability to disrupt the functionality of libreswan, potentially leading to denial of service (DoS) attacks.
How To Fix
Minimum fixed version
4.5-1.el8_7.1
This is the first release that contains the fix.
sudo dnf update libreswanTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
It is crucial to update libreswan to the latest version to mitigate the risk of this vulnerability. By applying the recommended security patches, you can ensure the stability and security of your system. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for libreswan →
FAQ
Libreswan is an implementation of IPsec and IKE for Linux, providing secure authentication and encryption services.
The vulnerability allows attackers to crash libreswan using malicious IKEv1 Aggressive Mode packets, potentially leading to denial of service.
Updating libreswan to version 4.5-1.el8_7.1 or later will patch the vulnerability and protect your system.
At the time of this advisory, there are no known exploits for this vulnerability.
You can find more information about this vulnerability, including the CVSS score and acknowledgments, on the CVE page: CVE-2023-30570.
Related vulnerabilities
Recent vulnerabilities recorded for libreswan.
