CVE-2023-38712

概要

参考情報

• libreswan/libreswan · Third Party Advisory
• libreswan.org/security/CVE-2023-38712 · Third Party Advisory

libreswan のその他の脆弱性

• CVE-2026-50722中 5.9Libreswan, via the function RSA_authenticate_hash_signature_pkcs1_1_5_rsa(), did not correctly verify the DER encoding of the ASN.1 digest w…
• CVE-2026-50721中 5.9Libreswan, via the function RSA_authenticate_hash_signature_raw_rsa(), did not correctly verify the length of the authentication hash when t…
• CVE-2026-12413高 7.5An invalidly formatted IKEv2 fragment causes the Libreswan pluto daemon to crash and restart. Continued exploitation would cause a denial of…
• CVE-2024-3652中 6.5The Libreswan Project was notified of an issue causing libreswan to restart when using IKEv1 without specifying an esp= line. When the peer …
• CVE-2023-38711中 6.5An issue was discovered in Libreswan before 4.12. When an IKEv1 Quick Mode connection configured with ID_IPV4_ADDR or ID_IPV6_ADDR receives …