Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-1763

Опубликовано: 12 мая 2020
Источник: nvd
CVSS3: 7.5
CVSS2: 5
EPSS Низкий

Описание

An out-of-bounds buffer read flaw was found in the pluto daemon of libreswan from versions 3.27 till 3.31 where, an unauthenticated attacker could use this flaw to crash libreswan by sending specially-crafted IKEv1 Informational Exchange packets. The daemon respawns after the crash.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:libreswan:libreswan:*:*:*:*:*:*:*:*
Версия от 3.27 (включая) до 3.31 (включая)
cpe:2.3:a:libreswan:libreswan:3.5:*:*:*:*:*:*:*

EPSS

Процентиль: 89%
0.04755
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-125
CWE-125

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 5 лет назад

An out-of-bounds buffer read flaw was found in the pluto daemon of libreswan from versions 3.27 till 3.31 where, an unauthenticated attacker could use this flaw to crash libreswan by sending specially-crafted IKEv1 Informational Exchange packets. The daemon respawns after the crash.

CVSS3: 7.5
redhat
больше 5 лет назад

An out-of-bounds buffer read flaw was found in the pluto daemon of libreswan from versions 3.27 till 3.31 where, an unauthenticated attacker could use this flaw to crash libreswan by sending specially-crafted IKEv1 Informational Exchange packets. The daemon respawns after the crash.

CVSS3: 7.5
debian
больше 5 лет назад

An out-of-bounds buffer read flaw was found in the pluto daemon of lib ...

github
больше 3 лет назад

An out-of-bounds buffer read flaw was found in the pluto daemon of libreswan from versions 3.27 till 3.31 where, an unauthenticated attacker could use this flaw to crash libreswan by sending specially-crafted IKEv1 Informational Exchange packets. The daemon respawns after the crash.

oracle-oval
больше 5 лет назад

ELSA-2020-2070: libreswan security update (IMPORTANT)

EPSS

Процентиль: 89%
0.04755
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-125
CWE-125