ELSA-2023-2633

Опубликовано: 17 мая 2023

Источник: oracle-oval

Платформа: Oracle Linux 9

Описание

ELSA-2023-2633: libreswan security update (MODERATE)

[4.9-2.0.1]

Add libreswan-oracle.patch to detect Oracle Linux distro

[4.9-2]

Fix CVE-2023-23009: remote DoS via crafted TS payload with an incorrect selector length (rhbz#2173674)

Обновленные пакеты

Oracle Linux 9

Oracle Linux aarch64

libreswan

4.9-2.0.1.el9_2

Oracle Linux x86_64

libreswan

4.9-2.0.1.el9_2

Связанные CVE

CVE-2023-23009

Ссылки на источники

Связанные уязвимости

CVE-2023-23009

CVSS3: 6.5

ubuntu

больше 2 лет назад

Libreswan 4.9 allows remote attackers to cause a denial of service (assert failure and daemon restart) via crafted TS payload with an incorrect selector length.

CVE-2023-23009

CVSS3: 6.5

redhat

больше 2 лет назад

Libreswan 4.9 allows remote attackers to cause a denial of service (assert failure and daemon restart) via crafted TS payload with an incorrect selector length.

CVE-2023-23009

CVSS3: 6.5

nvd

больше 2 лет назад

Libreswan 4.9 allows remote attackers to cause a denial of service (assert failure and daemon restart) via crafted TS payload with an incorrect selector length.

CVE-2023-23009

CVSS3: 6.5

debian

больше 2 лет назад

Libreswan 4.9 allows remote attackers to cause a denial of service (as ...

GHSA-3gxg-hfhr-6g9x

CVSS3: 7.5

github

больше 2 лет назад

Libreswan 4.9 allows remote attackers to cause a denial of service (assert failure and daemon restart) via crafted TS payload with an incorrect selector length.