Alerts This Week
Warning Icon 1 923
Alerts This Week
Warning Icon 1 923

Mageia 7: MGASA-2020-0215 Moderate: Libreswan Buffer Overflow

mageia
Calendar Grey May 15, 2020
Dist Mageia Esm H88
Recent libreswan updates tackle a severe weakness in Mageia 7, highlighting concerns regarding buffer overflow threats.
Updated libreswan packages fix security vulnerability: An out-of-bounds buffer read flaw was found in the pluto daemon of libreswan

Summary

Updated libreswan packages fix security vulnerability:
An out-of-bounds buffer read flaw was found in the pluto daemon of libreswan. An unauthenticated attacker could use this flaw to crash libreswan by sending specially-crafted IKEv1 Informational Exchange packets. The daemon respawns after the crash (CVE-2020-1763).

References

- https://bugs.mageia.org/show_bug.cgi?id=26613

- https://libreswan.org/security/CVE-2020-1763/CVE-2020-1763.txt

- https://access.redhat.com/errata/RHSA-2020:2070

- https://www.cve.org/CVERecord?id=CVE-2020-1763

Topics%20covered

Topics Covered

security advisory security issue buffer overflow crash unauthenticated access libreswan Mageia

Resolution

SRPMS

- 7/core/libreswan-3.32-1.mga7

Severity
important
Lowest
Low
Medium
High
Critical

Publication date: 15 May 2020
URL: https://advisories.mageia.org/MGASA-2020-0215.html
Type: security
CVE: CVE-2020-1763

Topics%20covered

Topics Covered

security advisory security issue buffer overflow crash unauthenticated access libreswan Mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here