DSA-5048: -1 libreswan -- security update
Published Jan 15, 2022
·Updated
It was discovered that the libreswan IPsec implementation could be forced into a crash/restart via a malformed IKEv1 packet, resulting in denial of service.
Affected Software
2 affected components
debian/libreswan
debian/libreswan
Event History
Jan 15, 2022
Advisory Published
12:00 AM
Frequently Asked Questions
1
What does an attacker need to do to trigger the denial of service?
An attacker needs to send a malformed IKEv1 packet to the libreswan IPsec implementation. The packet can force libreswan to crash or restart.
2
What is the operational impact if exploitation succeeds?
Successful exploitation results in denial of service because the libreswan service can be crashed or forced to restart.