CVE-2023-30570
Fixed in a distro release EPSS 1%CVSS 7.5
pluto in Libreswan before 4.11 allows a denial of service (responder SPI mishandling and daemon crash) via unauthenticated IKEv1 Aggressive Mode packets. The earliest affected version is 3.28.
Products: libreswan
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 8 | libreswan | 4.5-1.el8_7.1 |
| AlmaLinux 8 | libreswan | 4.9-3.el8_8 |
| AlmaLinux 9 | libreswan | 4.9-4.el9_2 |
| Debian 12 | libreswan | 4.10-2+deb12u1 |
| Debian 13 | libreswan | 4.11-1 |
| Debian 14 | libreswan | 4.11-1 |
| Red Hat Enterprise Linux 8 | libreswan | 0:4.5-1.el8_7.1 |
| Red Hat Enterprise Linux 8 | libreswan-debuginfo | 0:4.5-1.el8_7.1 |
| Red Hat Enterprise Linux 8 | libreswan-debugsource | 0:4.5-1.el8_7.1 |
| Red Hat Enterprise Linux 9 | libreswan | 0:4.6-3.el9_1.1 |
| Red Hat Enterprise Linux 9 | libreswan-debuginfo | 0:4.6-3.el9_1.1 |
| Red Hat Enterprise Linux 9 | libreswan-debugsource | 0:4.6-3.el9_1.1 |
| Red Hat openshift 4.15 | libreswan | 0:4.6-3.el9_0.3 |
| Red Hat openshift 4.15 | libreswan-debuginfo | 0:4.6-3.el9_0.3 |
| Red Hat openshift 4.15 | libreswan-debugsource | 0:4.6-3.el9_0.3 |
| Red Hat openshift 4.16 | libreswan | 0:4.6-3.el9_0.3 |
| Red Hat openshift 4.16 | libreswan-debuginfo | 0:4.6-3.el9_0.3 |
| Red Hat openshift 4.16 | libreswan-debugsource | 0:4.6-3.el9_0.3 |
| Red Hat openshift 4.17 | libreswan | 0:4.6-3.el9_0.3 |
| Red Hat openshift 4.17 | libreswan-debuginfo | 0:4.6-3.el9_0.3 |
| Red Hat openshift 4.17 | libreswan-debugsource | 0:4.6-3.el9_0.3 |
| Red Hat rhel aus 8.2 | libreswan | 0:3.29-7.el8_2.2 |
| Red Hat rhel aus 8.2 | libreswan-debuginfo | 0:3.29-7.el8_2.2 |
| Red Hat rhel aus 8.2 | libreswan-debugsource | 0:3.29-7.el8_2.2 |
| Red Hat rhel e4s 8.1 | libreswan | 0:3.29-7.el8_1.2 |
| Red Hat rhel e4s 8.1 | libreswan-debuginfo | 0:3.29-7.el8_1.2 |
| Red Hat rhel e4s 8.1 | libreswan-debugsource | 0:3.29-7.el8_1.2 |
| Red Hat rhel e4s 8.2 | libreswan | 0:3.29-7.el8_2.2 |
| Red Hat rhel e4s 8.2 | libreswan-debuginfo | 0:3.29-7.el8_2.2 |
| Red Hat rhel e4s 8.2 | libreswan-debugsource | 0:3.29-7.el8_2.2 |
| Red Hat rhel eus 8.4 | libreswan | 0:4.3-6.el8_4.1 |
| Red Hat rhel eus 8.4 | libreswan-debuginfo | 0:4.3-6.el8_4.1 |
| Red Hat rhel eus 8.4 | libreswan-debugsource | 0:4.3-6.el8_4.1 |
| Red Hat rhel eus 8.6 | libreswan | 0:4.5-1.el8_6.1 |
| Red Hat rhel eus 8.6 | libreswan-debuginfo | 0:4.5-1.el8_6.1 |
| Red Hat rhel eus 8.6 | libreswan-debugsource | 0:4.5-1.el8_6.1 |
| Red Hat rhel eus 9.0 | libreswan | 0:4.6-3.el9_0.1 |
| Red Hat rhel eus 9.0 | libreswan-debuginfo | 0:4.6-3.el9_0.1 |
| Red Hat rhel eus 9.0 | libreswan-debugsource | 0:4.6-3.el9_0.1 |
| Red Hat rhel tus 8.2 | libreswan | 0:3.29-7.el8_2.2 |
| Red Hat rhel tus 8.2 | libreswan-debuginfo | 0:3.29-7.el8_2.2 |
| Red Hat rhel tus 8.2 | libreswan-debugsource | 0:3.29-7.el8_2.2 |
| Ubuntu 18.04 LTS | libreswan | no fix |
| Ubuntu 20.04 LTS | libreswan | no fix |
| Ubuntu 22.04 LTS | libreswan | no fix |
| Ubuntu 24.04 LTS | libreswan | no fix |
| Ubuntu 25.10 | libreswan | no fix |
| Ubuntu 26.04 LTS | libreswan | no fix |
| Ubuntu 26.10 | libreswan | no fix |