CVE-2020-1763: High severity libreswan Libreswan vulnerability
An out-of-bounds buffer read flaw was found in the pluto daemon of libreswan from versions 3.27 till 3.31 where, an unauthenticated attacker could use this flaw to crash libreswan by sending specially-crafted IKEv1 Informational Exchange packets. The daemon respawns after the crash.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/libreswanto a version that resolves this vulnerability.Fixed in 3.27-6+deb10u1Fixed in 4.3-1+deb11u4Fixed in 4.3-1+deb11u3Fixed in 4.10-2+deb12u1Fixed in 4.12-1 - Upgrade
Upgrade
debian/libreswanto a version that resolves this vulnerability.Fixed in 3.27-6+deb10u1Fixed in 3.32-1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 2.14.0
Event History
Frequently Asked Questions
What is CVE-2020-1763?
CVE-2020-1763 is an out-of-bounds buffer read flaw in the pluto daemon of libreswan.
How does CVE-2020-1763 impact libreswan?
CVE-2020-1763 allows an unauthenticated attacker to crash libreswan by sending specially-crafted IKEv1 Informational Exchange packets.
What versions of libreswan are affected by CVE-2020-1763?
Versions 3.27 to 3.31 of libreswan are affected by CVE-2020-1763.
What is the severity of CVE-2020-1763?
CVE-2020-1763 has a severity value of 7.5, which is considered high.
How can I fix CVE-2020-1763?
To fix CVE-2020-1763, you should update to the patched versions of libreswan (3.27-6+deb10u1, 4.3-1+deb11u4, 4.3-1+deb11u3, 4.10-2+deb12u1, 4.12-1, or 3.32-1).