CVE-2023-38710
First published: Fri Aug 25 2023(Updated: )
An issue was discovered in Libreswan before 4.12. When an IKEv2 Child SA REKEY packet contains an invalid IPsec protocol ID number of 0 or 1, an error notify INVALID_SPI is sent back. The notify payload's protocol ID is copied from the incoming packet, but the code that verifies outgoing packets fails an assertion that the protocol ID must be ESP (2) or AH(3) and causes the pluto daemon to crash and restart. NOTE: the earliest affected version is 3.20.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Libreswan Libreswan | >=3.20<4.12 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2023-38710?
The severity of CVE-2023-38710 is high with a CVSS score of 7.5.
What is the affected software for CVE-2023-38710?
The affected software for CVE-2023-38710 is Libreswan versions 3.20 to 4.12.
How can I fix CVE-2023-38710?
To fix CVE-2023-38710, update Libreswan to version 4.12 or higher.
What happens if an IKEv2 Child SA REKEY packet contains an invalid IPsec protocol ID number for CVE-2023-38710?
If an IKEv2 Child SA REKEY packet contains an invalid IPsec protocol ID number (0 or 1), an error notify INVALID_SPI is sent back.
Where can I find more information about CVE-2023-38710?
You can find more information about CVE-2023-38710 at the following references: [here](https://github.com/libreswan/libreswan/tags) and [here](https://libreswan.org/security/CVE-2023-38710/).
- collector/nvd-index
- collector/nvd-api
- agent/references
- agent/severity
- agent/author
- agent/event
- agent/type
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/libreswan
- canonical/libreswan libreswan
- version/libreswan libreswan/3.20