CVE-2023-2295
Fixed in a distro release EPSS 2%CVSS 7.5
A vulnerability was found in the libreswan library. This security issue occurs when an IKEv1 Aggressive Mode packet is received with only unacceptable crypto algorithms, and the response packet is not sent with a zero responder SPI. When a subsequent packet is received where the sender reuses the libreswan responder SPI as its own initiator SPI, the pluto daemon state machine crashes. No remote code execution is possible. This CVE exists because of a CVE-2023-30570 security regression for libreswan package in Red Hat Enterprise Linux 8.8 and Red Hat Enterprise Linux 9.2.
Products: libreswan, redhat enterprise_linux, redhat enterprise_linux_eus, redhat enterprise_linux_server_aus, redhat enterprise_linux_server_tus
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 8 | libreswan | 4.9-3.el8_8 |
| AlmaLinux 9 | libreswan | 4.9-4.el9_2 |
| Red Hat Enterprise Linux 8 | libreswan | 0:4.9-3.el8_8 |
| Red Hat Enterprise Linux 8 | libreswan-debuginfo | 0:4.9-3.el8_8 |
| Red Hat Enterprise Linux 8 | libreswan-debugsource | 0:4.9-3.el8_8 |
| Red Hat Enterprise Linux 9 | libreswan | 0:4.9-4.el9_2 |
| Red Hat Enterprise Linux 9 | libreswan-debuginfo | 0:4.9-4.el9_2 |
| Red Hat Enterprise Linux 9 | libreswan-debugsource | 0:4.9-4.el9_2 |
| Red Hat openshift 4.15 | libreswan | 0:4.6-3.el9_0.3 |
| Red Hat openshift 4.15 | libreswan-debuginfo | 0:4.6-3.el9_0.3 |
| Red Hat openshift 4.15 | libreswan-debugsource | 0:4.6-3.el9_0.3 |
| Red Hat openshift 4.16 | libreswan | 0:4.6-3.el9_0.3 |
| Red Hat openshift 4.16 | libreswan-debuginfo | 0:4.6-3.el9_0.3 |
| Red Hat openshift 4.16 | libreswan-debugsource | 0:4.6-3.el9_0.3 |
| Red Hat openshift 4.17 | libreswan | 0:4.6-3.el9_0.3 |
| Red Hat openshift 4.17 | libreswan-debuginfo | 0:4.6-3.el9_0.3 |
| Red Hat openshift 4.17 | libreswan-debugsource | 0:4.6-3.el9_0.3 |
| Red Hat rhel e4s 9.0 | libreswan | 0:4.6-3.el9_0.3 |
| Red Hat rhel e4s 9.0 | libreswan-debuginfo | 0:4.6-3.el9_0.3 |
| Red Hat rhel e4s 9.0 | libreswan-debugsource | 0:4.6-3.el9_0.3 |
| Rocky Linux 8 | libreswan | 0:4.9-3.el8_8 |
| Ubuntu 18.04 LTS | libreswan | no fix |
| Ubuntu 20.04 LTS | libreswan | no fix |
| Ubuntu 22.04 LTS | libreswan | no fix |
| Ubuntu 24.04 LTS | libreswan | no fix |
| Ubuntu 25.10 | libreswan | no fix |
| Ubuntu 26.04 LTS | libreswan | no fix |
| Ubuntu 26.10 | libreswan | no fix |