Oracle Linux: CVE-2023-23009: ELSA-2023-2633: libreswan security update (MODERATE) (Multiple Advisories)

Oracle Linux: CVE-2023-23009: ELSA-2023-2633:libreswan security update (MODERATE) (Multiple Advisories)

Severity

7

CVSS

(AV:N/AC:L/Au:S/C:N/I:N/A:C)

Published

02/21/2023

Created

05/19/2023

Added

05/18/2023

Modified

12/05/2024

Description

Libreswan 4.9 allows remote attackers to cause a denial of service (assert failure and daemon restart) via crafted TS payload with an incorrect selector length. A flaw was found in the Libreswan package. A crafted TS payload with an incorrect selector length may allow a remote attacker to cause a denial of service.

Solution(s)

• oracle-linux-upgrade-libreswan

References

• https://attackerkb.com/topics/cve-2023-23009
• CVE - 2023-23009
• ELSA-2023-2633
• ELSA-2023-3095