PT-2022-15840 · Libreswan+4 · Libreswan+4

Myozcamo · Published 2022-01-11 · Updated 2022-07-08 · CVE-2022-23094

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Libreswan versions 4.2 through 4.5

Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and daemon crash, via a crafted IKEv1 packet. This occurs because the pluto/ikev1.c file wrongly expects that a state object exists.

Recommendations For versions 4.2 through 4.5, update to version 4.6 to resolve the issue. As a temporary workaround, consider restricting access to the IKEv1 packet handling functionality until the update is applied.

Exploit

Fix

DoS

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALSA-2022:0199

CESA-2022_0199

CVE-2022-23094

DSA-5048-1

MGASA-2022-0030

OESA-2022-1738

RHSA-2022:0199

RHSA-2022:0239

RHSA-2022_0199

RLSA-2022:0199

Affected Products

Almalinux

Centos

Libreswan

Red Hat

Rocky Linux

References · 31

• 🔥 https://github.com/libreswan/libreswan/issues/585 · Exploit
• https://ubuntu.com/security/CVE-2022-23094 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HPMIHAXWQUJAPCIGNJ5J5Q6ASWQBU7T5 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-23094 · Security Note
• https://linux.oracle.com/errata/ELSA-2022-0199.html · Vendor Advisory
• https://advisories.mageia.org/MGASA-2022-0030.html · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-23094 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-23094 · Security Note
• https://osv.dev/vulnerability/DSA-5048-1 · Vendor Advisory
• https://debian.org/security/2022/dsa-5048 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-23094 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2022-1738 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2022:0199 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2022-0030 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-23094 · Vendor Advisory