An issue was discovered in Libreswan before 4.12. When an IKEv1 Quick Mode connection configured with ID_IPV4_ADDR or ID_IPV6_ADDR receives an IDcr payload with ID_FQDN, a NULL pointer dereference causes a crash and restart of the pluto daemon. NOTE: the earliest affected version is 4.6.
History

Mon, 02 Dec 2024 14:45:00 +0000

Type Values Removed Values Added
First Time appeared Redhat rhel E4s
CPEs cpe:/a:redhat:rhel_e4s:9.0
Vendors & Products Redhat rhel E4s

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2023-08-25T00:00:00

Updated: 2024-08-02T17:46:56.601Z

Reserved: 2023-07-24T00:00:00

Link: CVE-2023-38711

cve-icon Vulnrichment

Updated: 2024-07-22T19:44:06.545Z

cve-icon NVD

Status : Modified

Published: 2023-08-25T21:15:08.230

Modified: 2024-11-21T08:14:06.280

Link: CVE-2023-38711

cve-icon Redhat

Severity : Moderate

Publid Date: 2023-08-08T00:00:00Z

Links: CVE-2023-38711 - Bugzilla