Insufficient verification of data authenticity in openswan.org products - CVE-2019-10155

Vulnerability identifier: #VU27710

CSH Severity: Low

CVSS v4: 6.3 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2019-10155

CWE-ID: CWE-345

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to gain access to sensitive information.

The vulnerability exists due to the application does not verify origin for IKEv1 informational exchange packets. A remote attacker can craft packets and make the application believe they were sent by the original user.

Successful exploitation of the vulnerability may allow an attacker to gain access to sensitive information and use this issue combined with other vulnerabilities to decrypt data.

libreswan
strongSwan
Openswan
libreswan (Alpine package)
libreswan
libreswan (Red Hat package)
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
Fedora

Install updates from vendor's website.

libreswan - update to 3.29
strongSwan - update to 5.0.0
Openswan - update to 2.6.51.4
libreswan (Alpine package) - update to 3.29-r0
libreswan - addressed in versions 3.29-1.fc29, 3.29-1.fc30
libreswan (Red Hat package) - update to 3.29-6.el8

• https://access.redhat.com/errata/RHSA-2019:3391
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10155
• https://libreswan.org/security/CVE-2019-10155/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EUEXFCN7FAYBKJBQJLYCEUQUCHDEJRZW/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LFGPGLLKAXSLWFI62A6BZHTZSCHRCBXS/

• Information disclosure in libreswan
• Insufficient verification of data authenticity in libreswan (Alpine package)
• Red Hat Enterprise Linux 8 update for libreswan
• Fedora 29 update for libreswan
• Fedora 30 update for libreswan