In Libreswan 3.27 an assertion failure can lead to a pluto IKE daemon restart. An attacker can trigger a NULL pointer dereference by initiating an IKEv2 IKE_SA_INIT exchange, followed by a bogus INFORMATIONAL exchange instead of the normallly expected IKE_AUTH exchange. This affects send_v2N_spi_response_from_state() in programs/pluto/ikev2_send.c that will then trigger a NULL pointer dereference leading to a restart of libreswan.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2019-05-24T13:06:41

Updated: 2024-08-04T23:17:40.062Z

Reserved: 2019-05-24T00:00:00

Link: CVE-2019-12312

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2019-05-24T14:29:00.230

Modified: 2024-11-21T04:22:36.383

Link: CVE-2019-12312

cve-icon Redhat

Severity : Moderate

Publid Date: 2019-05-12T00:00:00Z

Links: CVE-2019-12312 - Bugzilla