Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2020-1763

Опубликовано: 11 мая 2020
Источник: redhat
CVSS3: 7.5
EPSS Низкий

Описание

An out-of-bounds buffer read flaw was found in the pluto daemon of libreswan from versions 3.27 till 3.31 where, an unauthenticated attacker could use this flaw to crash libreswan by sending specially-crafted IKEv1 Informational Exchange packets. The daemon respawns after the crash.

An out-of-bounds buffer read flaw was found in the pluto daemon of libreswan. An unauthenticated attacker could use this flaw to crash libreswan by sending specially-crafted IKEv1 Informational Exchange packets. The daemon respawns after the crash.

Отчет

This flaw does not affect the version of libreswan shipped with Red Hat Enterprise Linux 6 and 7 because they did not ship the vulnerable code. (The offending commit fa004e7d4b83fbeaa8d0f6d8430a96aed97a97b9 and others was introduced in libreswan-3.27)

Меры по смягчению последствий

Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update as soon as possible.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6libreswanNot affected
Red Hat Enterprise Linux 7libreswanNot affected
Red Hat Enterprise Linux 8libreswanFixedRHSA-2020:207012.05.2020
Red Hat Enterprise Linux 8.0 Update Services for SAP SolutionslibreswanFixedRHSA-2020:206912.05.2020
Red Hat Enterprise Linux 8.1 Extended Update SupportlibreswanFixedRHSA-2020:207112.05.2020

Показывать по

Дополнительная информация

Статус:

Important
Дефект:
CWE-125
https://bugzilla.redhat.com/show_bug.cgi?id=1814541libreswan: DoS attack via malicious IKEv1 informational exchange message

EPSS

Процентиль: 89%
0.04755
Низкий

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 5 лет назад

An out-of-bounds buffer read flaw was found in the pluto daemon of libreswan from versions 3.27 till 3.31 where, an unauthenticated attacker could use this flaw to crash libreswan by sending specially-crafted IKEv1 Informational Exchange packets. The daemon respawns after the crash.

CVSS3: 7.5
nvd
больше 5 лет назад

An out-of-bounds buffer read flaw was found in the pluto daemon of libreswan from versions 3.27 till 3.31 where, an unauthenticated attacker could use this flaw to crash libreswan by sending specially-crafted IKEv1 Informational Exchange packets. The daemon respawns after the crash.

CVSS3: 7.5
debian
больше 5 лет назад

An out-of-bounds buffer read flaw was found in the pluto daemon of lib ...

github
больше 3 лет назад

An out-of-bounds buffer read flaw was found in the pluto daemon of libreswan from versions 3.27 till 3.31 where, an unauthenticated attacker could use this flaw to crash libreswan by sending specially-crafted IKEv1 Informational Exchange packets. The daemon respawns after the crash.

oracle-oval
больше 5 лет назад

ELSA-2020-2070: libreswan security update (IMPORTANT)

EPSS

Процентиль: 89%
0.04755
Низкий

7.5 High

CVSS3