DSA-4684: -1 libreswan -- security update

Published May 13, 2020

Updated

libreswan - security update

Other sources

Stephan Zeisberg discovered that the libreswan IPsec implementation could be forced into a crash/restart via a malformed IKEv1 Informational Exchange packet, resulting in denial of service.

Affected Software

2 affected components

debian/libreswan

Event History

May 13, 2020

Advisory Published

12:00 AM

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2020-1763

Frequently Asked Questions

What does an attacker need to do to trigger the denial of service?

The attacker needs to send a malformed IKEv1 Informational Exchange packet to the libreswan IPsec implementation. Successful exploitation can force the service to crash and restart.

What is the practical impact of a successful attack?

The documented impact is denial of service. Affected libreswan instances can be forced into a crash/restart condition.

DSA-4684: -1 libreswan -- security update

Other sources

Affected Software

Event History

Child vulnerabilities

Frequently Asked Questions

What does an attacker need to do to trigger the denial of service?

What is the practical impact of a successful attack?

Company

Resources

Contact

Frequently Asked Questions

What does an attacker need to do to trigger the denial of service?

What is the practical impact of a successful attack?