CVE-2023-23009

Description

Libreswan 4.9 allows remote attackers to cause a denial of service (assert failure and daemon restart) via crafted TS payload with an incorrect selector length.

Affected Platforms

Weakness Type

CWE-400, CWE-400

References

• https://github.com/libreswan/libreswan/issues/954
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro…
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro…
• https://www.debian.org/security/2023/dsa-5368
• https://github.com/libreswan/libreswan/issues/954
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro…