CVE-2023-23009

Опубликовано: 21 фев. 2023

Источник: nvd

CVSS3: 6.5

EPSS Низкий

Описание

Libreswan 4.9 allows remote attackers to cause a denial of service (assert failure and daemon restart) via crafted TS payload with an incorrect selector length.

Ссылки

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:libreswan:libreswan:4.9:*:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*

EPSS

Процентиль: 74%

0.01606

Низкий

6.5 Medium

CVSS3

Дефекты

CWE-400

Связанные уязвимости

CVE-2023-23009

CVSS3: 6.5

ubuntu

больше 3 лет назад

Libreswan 4.9 allows remote attackers to cause a denial of service (assert failure and daemon restart) via crafted TS payload with an incorrect selector length.

CVE-2023-23009

CVSS3: 6.5

redhat

больше 3 лет назад

Libreswan 4.9 allows remote attackers to cause a denial of service (assert failure and daemon restart) via crafted TS payload with an incorrect selector length.

CVE-2023-23009

CVSS3: 6.5

debian

больше 3 лет назад

Libreswan 4.9 allows remote attackers to cause a denial of service (as ...

GHSA-3gxg-hfhr-6g9x

CVSS3: 7.5

github

больше 3 лет назад

Libreswan 4.9 allows remote attackers to cause a denial of service (assert failure and daemon restart) via crafted TS payload with an incorrect selector length.

ELSA-2023-3095

oracle-oval

около 3 лет назад

ELSA-2023-3095: libreswan security and bug fix update (MODERATE)

EPSS

Процентиль: 74%

0.01606

Низкий

6.5 Medium

CVSS3

Дефекты

CWE-400