cbcvebase.
CVE-2023-2295
published 2023-05-17

CVE-2023-2295: A vulnerability was found in the libreswan library. This security issue occurs when an IKEv1 Aggressive Mode packet is received with only unacceptable crypto…

PriorityP345high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
1.58%
73.0th percentile
A vulnerability was found in the libreswan library. This security issue occurs when an IKEv1 Aggressive Mode packet is received with only unacceptable crypto algorithms, and the response packet is not sent with a zero responder SPI. When a subsequent packet is received where the sender reuses the libreswan responder SPI as its own initiator SPI, the pluto daemon state machine crashes. No remote code execution is possible. This CVE exists because of a CVE-2023-30570 security regression for libreswan package in Red Hat Enterprise Linux 8.8 and Red Hat Enterprise Linux 9.2.

Affected

10 ranges
VendorProductVersion rangeFixed in
libreswanlibreswan——
libreswanlibreswan——
libreswanlibreswan——
redhatenterprise_linux——
redhatenterprise_linux——
redhatenterprise_linux_eus——
redhatenterprise_linux_eus——
redhatenterprise_linux_server_aus——
redhatenterprise_linux_server_aus——
redhatenterprise_linux_server_tus——

CVSS provenance

nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
osv7.5HIGH
vendor_redhat7.5HIGH
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.