CVE-2020-1763: High severity libreswan vulnerability
An out-of-bounds buffer read flaw was found in the pluto daemon of libreswan from versions 3.27 till 3.31 where, an unauthenticated attacker could use this flaw to crash libreswan by sending specially-crafted IKEv1 Informational Exchange packets. The daemon respawns after the crash.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2020-1763?
CVE-2020-1763 is an out-of-bounds buffer read flaw in the pluto daemon of libreswan.
How does CVE-2020-1763 impact libreswan?
CVE-2020-1763 allows an unauthenticated attacker to crash libreswan by sending specially-crafted IKEv1 Informational Exchange packets.
What versions of libreswan are affected by CVE-2020-1763?
Versions 3.27 to 3.31 of libreswan are affected by CVE-2020-1763.
What is the severity of CVE-2020-1763?
CVE-2020-1763 has a severity value of 7.5, which is considered high.
How can I fix CVE-2020-1763?
To fix CVE-2020-1763, you should update to the patched versions of libreswan (3.27-6+deb10u1, 4.3-1+deb11u4, 4.3-1+deb11u3, 4.10-2+deb12u1, 4.12-1, or 3.32-1).