CVE-2022-23094 — NULL Pointer Dereference in Libreswan

CWE-476 — NULL Pointer Dereference5 documents5 sources
Severity
7.5HIGHNVD
EPSS
1.3%
top 20.28%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
LibreswanDebian LibreswanDebian Linux+1 more
Timeline
PublishedJan 15
Latest updateJan 16

Description

Libreswan 4.2 through 4.5 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted IKEv1 packet because pluto/ikev1.c wrongly expects that a state object exists. This is fixed in 4.6.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages3 packages

▶debiandebian/libreswan< libreswan 4.6-1 (bookworm)
▶NVDlibreswan/libreswan4.2 — 4.6
▶Debianlibreswan/libreswan< 4.3-1+deb11u1+3

Also affects: Debian Linux 10.0, Fedora 34, 35

🔴Vulnerability Details

2
GHSA
GHSA-m3gq-3gw9-x3fv: Libreswan 4↗2022-01-16
▶
OSV
CVE-2022-23094: Libreswan 4↗2022-01-15
▶

📋Vendor Advisories

2
Red Hat
libreswan: Malicious IKEv1 packet can cause libreswan to restart↗2022-01-11
▶
Debian
CVE-2022-23094: libreswan - Libreswan 4.2 through 4.5 allows remote attackers to cause a denial of service (...↗2022
▶