CVE-2023-38712
Fixed in a distro release EPSS <1%
An issue was discovered in Libreswan 3.x and 4.x before 4.12. When an IKEv1 ISAKMP SA Informational Exchange packet contains a Delete/Notify payload followed by further Notifies that act on the ISAKMP SA, such as a duplicated Delete/Notify message, a NULL pointer dereference on the deleted state causes the pluto daemon to crash and restart.
Products: libreswan
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 8 | libreswan | 4.12-2.el8 |
| AlmaLinux 9 | libreswan | 4.12-1.el9 |
| Amazon Linux 2 | libreswan | 3.25-4.8.amzn2.0.2 |
| Debian 12 | libreswan | no fix |
| Debian 13 | libreswan | 4.12-1 |
| Debian 14 | libreswan | 4.12-1 |
| Red Hat Enterprise Linux 8 | libreswan | 0:4.12-2.el8 |
| Red Hat Enterprise Linux 8 | libreswan-debuginfo | 0:4.12-2.el8 |
| Red Hat Enterprise Linux 8 | libreswan-debugsource | 0:4.12-2.el8 |
| Red Hat Enterprise Linux 9 | libreswan | 0:4.12-1.el9 |
| Red Hat Enterprise Linux 9 | libreswan-debuginfo | 0:4.12-1.el9 |
| Red Hat Enterprise Linux 9 | libreswan-debugsource | 0:4.12-1.el9 |
| Red Hat openshift 4.15 | libreswan | 0:4.6-3.el9_0.3 |
| Red Hat openshift 4.15 | libreswan-debuginfo | 0:4.6-3.el9_0.3 |
| Red Hat openshift 4.15 | libreswan-debugsource | 0:4.6-3.el9_0.3 |
| Red Hat openshift 4.16 | libreswan | 0:4.6-3.el9_0.3 |
| Red Hat openshift 4.16 | libreswan-debuginfo | 0:4.6-3.el9_0.3 |
| Red Hat openshift 4.16 | libreswan-debugsource | 0:4.6-3.el9_0.3 |
| Red Hat openshift 4.17 | libreswan | 0:4.6-3.el9_0.3 |
| Red Hat openshift 4.17 | libreswan-debuginfo | 0:4.6-3.el9_0.3 |
| Red Hat openshift 4.17 | libreswan-debugsource | 0:4.6-3.el9_0.3 |
| Red Hat rhel e4s 9.0 | libreswan | 0:4.6-3.el9_0.3 |
| Red Hat rhel e4s 9.0 | libreswan-debuginfo | 0:4.6-3.el9_0.3 |
| Red Hat rhel e4s 9.0 | libreswan-debugsource | 0:4.6-3.el9_0.3 |
| Red Hat rhel eus 9.2 | libreswan | 0:4.9-5.el9_2.4 |
| Red Hat rhel eus 9.2 | libreswan-debuginfo | 0:4.9-5.el9_2.4 |
| Red Hat rhel eus 9.2 | libreswan-debugsource | 0:4.9-5.el9_2.4 |
| Rocky Linux 8 | libreswan | 0:4.12-2.el8_10.3 |
| Ubuntu 18.04 LTS | libreswan | no fix |
| Ubuntu 20.04 LTS | libreswan | no fix |
| Ubuntu 22.04 LTS | libreswan | no fix |
| Ubuntu 24.04 LTS | libreswan | no fix |
| Ubuntu 25.10 | libreswan | no fix |
| Ubuntu 26.04 LTS | libreswan | no fix |
| Ubuntu 26.10 | libreswan | no fix |