PT-2024-3056 · Libreswan+6 · Libreswan+6
Andrew Vaughn
+1
·
Published
2024-03-11
·
Updated
2024-11-20
·
CVE-2024-2357
CVSS v2.0
7.8
High
| Vector | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
libreswan versions prior to 4.14
Description
The issue causes libreswan to restart under some IKEv2 retransmit scenarios when a connection is configured to use PreSharedKeys (authby=secret) and the connection cannot find a matching configured secret. This can lead to repeated crashes and a Denial of Service, especially when such a connection is automatically added on startup using the auto= keyword. The vulnerability is related to the use of PreSharedKeys for creating the AUTH payload in IKE AUTH Exchange, allowing a remote attacker to perform a Denial of Service attack.
Recommendations
For versions prior to 4.14, upgrade to version 4.14 to resolve the issue. As a temporary workaround, consider disabling the use of PreSharedKeys (authby=secret) for connections that cannot find a matching configured secret, or avoid automatically adding such connections on startup using the auto= keyword. Restrict access to the
authby=secret configuration to minimize the risk of exploitation.Fix
Resource Exhaustion
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Almalinux
Centos
Debian
Red Hat
Red Os
Rocky Linux
Libreswan