Reachable Assertion in libreswan - CVE-2023-38710

Vulnerability identifier: #VU79138

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-38710

CWE-ID: CWE-617

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a reachable assertion when processing IKEv2 REKEY packets. A remote attacker can send specially crafted packets to the system and perform a denial of service (DoS) attack.

libreswan
Oracle Linux
Anolis OS
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux Server - AUS
openEuler
Fedora
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
libreswan (Red Hat package)
libreswan
libreswan-debugsource
libreswan-debuginfo
libreswan-help
libreswan-doc
Submariner

Install updates from vendor's website.

libreswan - update to 4.12
Submariner - addressed in versions 0.17.5, 0.19.2
libreswan (Red Hat package) - addressed in versions 4.6-3.el9_0.3, 4.9-5.el9_2.4, 4.12-1.el9, 4.12-2.el8
libreswan - update to 4.12-1
libreswan-debugsource - update to 4.12-1
libreswan-debuginfo - update to 4.12-1
libreswan-help - update to 4.12-1
libreswan - addressed in versions 4.12-1, 4.12-2.0.2
libreswan-doc - update to 4.12-1
libreswan - addressed in versions 4.12-1.fc37, 4.12-1.fc38

• https://github.com/libreswan/libreswan/releases/tag/v4.12
• https://libreswan.org/security/CVE-2023-38710/CVE-2023-38710.txt

• Multiple vulnerabilities in libreswan
• Fedora 37 update for libreswan
• Fedora 38 update for libreswan
• Red Hat Enterprise Linux 9 update for libreswan
• Multiple vulnerabilities in Oracle Linux
• Red Hat Enterprise Linux 8 update for libreswan
• openEuler update for libreswan
• Red Hat Enterprise Linux 9 update for libreswan
• Red Hat Enterprise Linux 9 update for libreswan
• Multiple vulnerabilities in Submariner 0.17
• Multiple vulnerabilities in Submariner 0.19
• Anolis OS update for libreswan
• Anolis OS update for libreswan