{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_vex", "csaf_version": "2.0", "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "title": "Malicious IKEv1 Aggressive Mode packets can crash libreswan", "tracking": { "current_release_date": "2026-07-28T07:23:58+00:00", "generator": { "date": "2026-07-28T07:23:58+00:00", "engine": { "name": "CSAF Generator", "version": "3.1.0" } }, "id": "CVE-2023-30570", "initial_release_date": "2023-05-03T00:00:00+00:00", "revision_history": [ { "date": "2026-07-28T07:23:58+00:00", "number": "1", "summary": "Last generated version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "category": "vendor", "name": "Red Hat", "branches": [ { "category": "product_name", "name": "OpenShift Container Platform 4.15", "product": { "name": "OpenShift Container Platform 4.15", "product_id": "openshift-4.15::el9", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:4.15::el9" } } }, { "category": "product_name", "name": "OpenShift Container Platform 4.16", "product": { "name": "OpenShift Container Platform 4.16", "product_id": "openshift-4.16::el9", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:4.16::el9" } } }, { "category": "product_name", "name": "OpenShift Container Platform 4.17", "product": { "name": "OpenShift Container Platform 4.17", "product_id": "openshift-4.17::el9", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:4.17::el9" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 6-els", "product": { "name": "Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_els:6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 7.9.z", "product": { "name": "Red Hat Enterprise Linux 7.9.z", "product_id": "rhel-7.9.z.els", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_els:7" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.1.0.z", "product": { "name": "Red Hat Enterprise Linux 8.1.0.z", "product_id": "rhel-8.1.0.z.e4s::appstream", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_e4s:8.1::appstream" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.2.0.z", "product": { "name": "Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.aus::appstream", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_aus:8.2::appstream" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.2.0.z", "product": { "name": "Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.e4s::appstream", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_e4s:8.2::appstream" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.2.0.z", "product": { "name": "Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.tus::appstream", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_tus:8.2::appstream" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.4.0.z", "product": { "name": "Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus::appstream", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_eus:8.4::appstream" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.6.0.z", "product": { "name": "Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.eus::appstream", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_eus:8.6::appstream" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.7", "product": { "name": "Red Hat Enterprise Linux 8.7", "product_id": "rhel-8.7.0.z::appstream", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:8::appstream" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.8.0.z", "product": { "name": "Red Hat Enterprise Linux 8.8.0.z", "product_id": "rhel-8.8.0.z.eus", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_eus:8.8" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.9.0", "product": { "name": "Red Hat Enterprise Linux 8.9.0", "product_id": "rhel-8.9.0", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:8" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 9.0.0.z", "product": { "name": "Red Hat Enterprise Linux 9.0.0.z", "product_id": "rhel-9.0.0.z.eus::appstream", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_eus:9.0::appstream" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 9.1", "product": { "name": "Red Hat Enterprise Linux 9.1", "product_id": "rhel-9.1.0.z::appstream", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:9::appstream" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 9.2.0.z", "product": { "name": "Red Hat Enterprise Linux 9.2.0.z", "product_id": "rhel-9.2.0.z.eus", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_eus:9.2" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 9.3.0", "product": { "name": "Red Hat Enterprise Linux 9.3.0", "product_id": "rhel-9.3.0", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:9" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.4.0.z", "product": { "name": "Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-br-8.4.0.z.eus::appstream", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_eus:8.4::appstream" } } }, { "category": "product_version", "name": "libreswan", "product": { "name": "libreswan", "product_id": "libreswan", "product_identification_helper": { "purl": "pkg:rpm/redhat/libreswan" } } }, { "category": "product_version", "name": "libreswan", "product": { "name": "libreswan", "product_id": "libreswan-0:3.29-7.el8_1.2", "product_identification_helper": { "purl": "pkg:rpm/redhat/libreswan@3.29-7.el8_1.2?epoch=0" } } }, { "category": "product_version", "name": "libreswan", "product": { "name": "libreswan", "product_id": "libreswan-0:3.29-7.el8_1.2.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/libreswan@3.29-7.el8_1.2?arch=src&epoch=0" } } }, { "category": "product_version", "name": "libreswan", "product": { "name": "libreswan", "product_id": "libreswan-0:3.29-7.el8_2.2", "product_identification_helper": { "purl": "pkg:rpm/redhat/libreswan@3.29-7.el8_2.2?epoch=0" } } }, { "category": "product_version", "name": "libreswan", "product": { "name": "libreswan", "product_id": "libreswan-0:3.29-7.el8_2.2.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/libreswan@3.29-7.el8_2.2?arch=src&epoch=0" } } }, { "category": "product_version", "name": "libreswan", "product": { "name": "libreswan", "product_id": "libreswan-0:4.3-6.el8_4.1", "product_identification_helper": { "purl": "pkg:rpm/redhat/libreswan@4.3-6.el8_4.1?epoch=0" } } }, { "category": "product_version", "name": "libreswan", "product": { "name": "libreswan", "product_id": "libreswan-0:4.3-6.el8_4.1.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/libreswan@4.3-6.el8_4.1?arch=src&epoch=0" } } }, { "category": "product_version", "name": "libreswan", "product": { "name": "libreswan", "product_id": "libreswan-0:4.5-1.el8_6.1", "product_identification_helper": { "purl": "pkg:rpm/redhat/libreswan@4.5-1.el8_6.1?epoch=0" } } }, { "category": "product_version", "name": "libreswan", "product": { "name": "libreswan", "product_id": "libreswan-0:4.5-1.el8_6.1.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/libreswan@4.5-1.el8_6.1?arch=src&epoch=0" } } }, { "category": "product_version", "name": "libreswan", "product": { "name": "libreswan", "product_id": "libreswan-0:4.5-1.el8_7.1", "product_identification_helper": { "purl": "pkg:rpm/redhat/libreswan@4.5-1.el8_7.1?epoch=0" } } }, { "category": "product_version", "name": "libreswan", "product": { "name": "libreswan", "product_id": "libreswan-0:4.5-1.el8_7.1.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/libreswan@4.5-1.el8_7.1?arch=src&epoch=0" } } }, { "category": "product_version", "name": "libreswan", "product": { "name": "libreswan", "product_id": "libreswan-0:4.6-3.el9_0.1", "product_identification_helper": { "purl": "pkg:rpm/redhat/libreswan@4.6-3.el9_0.1?epoch=0" } } }, { "category": "product_version", "name": "libreswan", "product": { "name": "libreswan", "product_id": "libreswan-0:4.6-3.el9_0.1.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/libreswan@4.6-3.el9_0.1?arch=src&epoch=0" } } }, { "category": "product_version", "name": "libreswan", "product": { "name": "libreswan", "product_id": "libreswan-0:4.6-3.el9_0.3", "product_identification_helper": { "purl": "pkg:rpm/redhat/libreswan@4.6-3.el9_0.3?epoch=0" } } }, { "category": "product_version", "name": "libreswan", "product": { "name": "libreswan", "product_id": "libreswan-0:4.6-3.el9_0.3.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/libreswan@4.6-3.el9_0.3?arch=src&epoch=0" } } }, { "category": "product_version", "name": "libreswan", "product": { "name": "libreswan", "product_id": "libreswan-0:4.6-3.el9_1.1", "product_identification_helper": { "purl": "pkg:rpm/redhat/libreswan@4.6-3.el9_1.1?epoch=0" } } }, { "category": "product_version", "name": "libreswan", "product": { "name": "libreswan", "product_id": "libreswan-0:4.6-3.el9_1.1.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/libreswan@4.6-3.el9_1.1?arch=src&epoch=0" } } }, { "category": "product_version", "name": "libreswan-debuginfo", "product": { "name": "libreswan-debuginfo", "product_id": "libreswan-debuginfo", "product_identification_helper": { "purl": "pkg:rpm/redhat/libreswan-debuginfo" } } }, { "category": "product_version", "name": "libreswan-debugsource", "product": { "name": "libreswan-debugsource", "product_id": "libreswan-debugsource", "product_identification_helper": { "purl": "pkg:rpm/redhat/libreswan-debugsource" } } }, { "category": "product_version", "name": "libreswan", "product": { "name": "libreswan", "product_id": "libreswan.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/libreswan?arch=src" } } } ] } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "libreswan as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:libreswan" }, "product_reference": "libreswan", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "libreswan as a component of Red Hat Enterprise Linux 8.9.0", "product_id": "rhel-8.9.0:libreswan" }, "product_reference": "libreswan", "relates_to_product_reference": "rhel-8.9.0" }, { "category": "default_component_of", "full_product_name": { "name": "libreswan as a component of Red Hat Enterprise Linux 9.3.0", "product_id": "rhel-9.3.0:libreswan" }, "product_reference": "libreswan", "relates_to_product_reference": "rhel-9.3.0" }, { "category": "default_component_of", "full_product_name": { "name": "libreswan as a component of Red Hat Enterprise Linux 8.8.0.z", "product_id": "rhel-8.8.0.z.eus:libreswan" }, "product_reference": "libreswan", "relates_to_product_reference": "rhel-8.8.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "libreswan as a component of Red Hat Enterprise Linux 7.9.z", "product_id": "rhel-7.9.z.els:libreswan" }, "product_reference": "libreswan", "relates_to_product_reference": "rhel-7.9.z.els" }, { "category": "default_component_of", "full_product_name": { "name": "libreswan as a component of Red Hat Enterprise Linux 9.2.0.z", "product_id": "rhel-9.2.0.z.eus:libreswan" }, "product_reference": "libreswan", "relates_to_product_reference": "rhel-9.2.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "libreswan-0:3.29-7.el8_1.2 as a component of Red Hat Enterprise Linux 8.1.0.z", "product_id": "rhel-8.1.0.z.e4s::appstream:libreswan-0:3.29-7.el8_1.2" }, "product_reference": "libreswan-0:3.29-7.el8_1.2", "relates_to_product_reference": "rhel-8.1.0.z.e4s::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "libreswan-0:3.29-7.el8_1.2.src as a component of Red Hat Enterprise Linux 8.1.0.z", "product_id": "rhel-8.1.0.z.e4s::appstream:libreswan-0:3.29-7.el8_1.2.src" }, "product_reference": "libreswan-0:3.29-7.el8_1.2.src", "relates_to_product_reference": "rhel-8.1.0.z.e4s::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "libreswan-0:3.29-7.el8_2.2 as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.e4s::appstream:libreswan-0:3.29-7.el8_2.2" }, "product_reference": "libreswan-0:3.29-7.el8_2.2", "relates_to_product_reference": "rhel-8.2.0.z.e4s::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "libreswan-0:3.29-7.el8_2.2 as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.aus::appstream:libreswan-0:3.29-7.el8_2.2" }, "product_reference": "libreswan-0:3.29-7.el8_2.2", "relates_to_product_reference": "rhel-8.2.0.z.aus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "libreswan-0:3.29-7.el8_2.2 as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.tus::appstream:libreswan-0:3.29-7.el8_2.2" }, "product_reference": "libreswan-0:3.29-7.el8_2.2", "relates_to_product_reference": "rhel-8.2.0.z.tus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "libreswan-0:3.29-7.el8_2.2.src as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.tus::appstream:libreswan-0:3.29-7.el8_2.2.src" }, "product_reference": "libreswan-0:3.29-7.el8_2.2.src", "relates_to_product_reference": "rhel-8.2.0.z.tus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "libreswan-0:3.29-7.el8_2.2.src as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.e4s::appstream:libreswan-0:3.29-7.el8_2.2.src" }, "product_reference": "libreswan-0:3.29-7.el8_2.2.src", "relates_to_product_reference": "rhel-8.2.0.z.e4s::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "libreswan-0:3.29-7.el8_2.2.src as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.aus::appstream:libreswan-0:3.29-7.el8_2.2.src" }, "product_reference": "libreswan-0:3.29-7.el8_2.2.src", "relates_to_product_reference": "rhel-8.2.0.z.aus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "libreswan-0:4.3-6.el8_4.1 as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus::appstream:libreswan-0:4.3-6.el8_4.1" }, "product_reference": "libreswan-0:4.3-6.el8_4.1", "relates_to_product_reference": "rhel-8.4.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "libreswan-0:4.3-6.el8_4.1 as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-br-8.4.0.z.eus::appstream:libreswan-0:4.3-6.el8_4.1" }, "product_reference": "libreswan-0:4.3-6.el8_4.1", "relates_to_product_reference": "rhel-br-8.4.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "libreswan-0:4.3-6.el8_4.1.src as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus::appstream:libreswan-0:4.3-6.el8_4.1.src" }, "product_reference": "libreswan-0:4.3-6.el8_4.1.src", "relates_to_product_reference": "rhel-8.4.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "libreswan-0:4.3-6.el8_4.1.src as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-br-8.4.0.z.eus::appstream:libreswan-0:4.3-6.el8_4.1.src" }, "product_reference": "libreswan-0:4.3-6.el8_4.1.src", "relates_to_product_reference": "rhel-br-8.4.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "libreswan-0:4.5-1.el8_6.1 as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.eus::appstream:libreswan-0:4.5-1.el8_6.1" }, "product_reference": "libreswan-0:4.5-1.el8_6.1", "relates_to_product_reference": "rhel-8.6.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "libreswan-0:4.5-1.el8_6.1.src as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.eus::appstream:libreswan-0:4.5-1.el8_6.1.src" }, "product_reference": "libreswan-0:4.5-1.el8_6.1.src", "relates_to_product_reference": "rhel-8.6.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "libreswan-0:4.5-1.el8_7.1 as a component of Red Hat Enterprise Linux 8.7", "product_id": "rhel-8.7.0.z::appstream:libreswan-0:4.5-1.el8_7.1" }, "product_reference": "libreswan-0:4.5-1.el8_7.1", "relates_to_product_reference": "rhel-8.7.0.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "libreswan-0:4.5-1.el8_7.1.src as a component of Red Hat Enterprise Linux 8.7", "product_id": "rhel-8.7.0.z::appstream:libreswan-0:4.5-1.el8_7.1.src" }, "product_reference": "libreswan-0:4.5-1.el8_7.1.src", "relates_to_product_reference": "rhel-8.7.0.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "libreswan-0:4.6-3.el9_0.1 as a component of Red Hat Enterprise Linux 9.0.0.z", "product_id": "rhel-9.0.0.z.eus::appstream:libreswan-0:4.6-3.el9_0.1" }, "product_reference": "libreswan-0:4.6-3.el9_0.1", "relates_to_product_reference": "rhel-9.0.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "libreswan-0:4.6-3.el9_0.1.src as a component of Red Hat Enterprise Linux 9.0.0.z", "product_id": "rhel-9.0.0.z.eus::appstream:libreswan-0:4.6-3.el9_0.1.src" }, "product_reference": "libreswan-0:4.6-3.el9_0.1.src", "relates_to_product_reference": "rhel-9.0.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "libreswan-0:4.6-3.el9_0.3 as a component of OpenShift Container Platform 4.15", "product_id": "openshift-4.15::el9:libreswan-0:4.6-3.el9_0.3" }, "product_reference": "libreswan-0:4.6-3.el9_0.3", "relates_to_product_reference": "openshift-4.15::el9" }, { "category": "default_component_of", "full_product_name": { "name": "libreswan-0:4.6-3.el9_0.3 as a component of OpenShift Container Platform 4.17", "product_id": "openshift-4.17::el9:libreswan-0:4.6-3.el9_0.3" }, "product_reference": "libreswan-0:4.6-3.el9_0.3", "relates_to_product_reference": "openshift-4.17::el9" }, { "category": "default_component_of", "full_product_name": { "name": "libreswan-0:4.6-3.el9_0.3 as a component of OpenShift Container Platform 4.16", "product_id": "openshift-4.16::el9:libreswan-0:4.6-3.el9_0.3" }, "product_reference": "libreswan-0:4.6-3.el9_0.3", "relates_to_product_reference": "openshift-4.16::el9" }, { "category": "default_component_of", "full_product_name": { "name": "libreswan-0:4.6-3.el9_0.3.src as a component of OpenShift Container Platform 4.16", "product_id": "openshift-4.16::el9:libreswan-0:4.6-3.el9_0.3.src" }, "product_reference": "libreswan-0:4.6-3.el9_0.3.src", "relates_to_product_reference": "openshift-4.16::el9" }, { "category": "default_component_of", "full_product_name": { "name": "libreswan-0:4.6-3.el9_0.3.src as a component of OpenShift Container Platform 4.15", "product_id": "openshift-4.15::el9:libreswan-0:4.6-3.el9_0.3.src" }, "product_reference": "libreswan-0:4.6-3.el9_0.3.src", "relates_to_product_reference": "openshift-4.15::el9" }, { "category": "default_component_of", "full_product_name": { "name": "libreswan-0:4.6-3.el9_0.3.src as a component of OpenShift Container Platform 4.17", "product_id": "openshift-4.17::el9:libreswan-0:4.6-3.el9_0.3.src" }, "product_reference": "libreswan-0:4.6-3.el9_0.3.src", "relates_to_product_reference": "openshift-4.17::el9" }, { "category": "default_component_of", "full_product_name": { "name": "libreswan-0:4.6-3.el9_1.1 as a component of Red Hat Enterprise Linux 9.1", "product_id": "rhel-9.1.0.z::appstream:libreswan-0:4.6-3.el9_1.1" }, "product_reference": "libreswan-0:4.6-3.el9_1.1", "relates_to_product_reference": "rhel-9.1.0.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "libreswan-0:4.6-3.el9_1.1.src as a component of Red Hat Enterprise Linux 9.1", "product_id": "rhel-9.1.0.z::appstream:libreswan-0:4.6-3.el9_1.1.src" }, "product_reference": "libreswan-0:4.6-3.el9_1.1.src", "relates_to_product_reference": "rhel-9.1.0.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "libreswan-debuginfo as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus::appstream:libreswan-debuginfo" }, "product_reference": "libreswan-debuginfo", "relates_to_product_reference": "rhel-8.4.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "libreswan-debuginfo as a component of OpenShift Container Platform 4.16", "product_id": "openshift-4.16::el9:libreswan-debuginfo" }, "product_reference": "libreswan-debuginfo", "relates_to_product_reference": "openshift-4.16::el9" }, { "category": "default_component_of", "full_product_name": { "name": "libreswan-debuginfo as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.eus::appstream:libreswan-debuginfo" }, "product_reference": "libreswan-debuginfo", "relates_to_product_reference": "rhel-8.6.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "libreswan-debuginfo as a component of Red Hat Enterprise Linux 8.1.0.z", "product_id": "rhel-8.1.0.z.e4s::appstream:libreswan-debuginfo" }, "product_reference": "libreswan-debuginfo", "relates_to_product_reference": "rhel-8.1.0.z.e4s::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "libreswan-debuginfo as a component of Red Hat Enterprise Linux 8.8.0.z", "product_id": "rhel-8.8.0.z.eus:libreswan-debuginfo" }, "product_reference": "libreswan-debuginfo", "relates_to_product_reference": "rhel-8.8.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "libreswan-debuginfo as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-br-8.4.0.z.eus::appstream:libreswan-debuginfo" }, "product_reference": "libreswan-debuginfo", "relates_to_product_reference": "rhel-br-8.4.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "libreswan-debuginfo as a component of Red Hat Enterprise Linux 9.0.0.z", "product_id": "rhel-9.0.0.z.eus::appstream:libreswan-debuginfo" }, "product_reference": "libreswan-debuginfo", "relates_to_product_reference": "rhel-9.0.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "libreswan-debuginfo as a component of OpenShift Container Platform 4.15", "product_id": "openshift-4.15::el9:libreswan-debuginfo" }, "product_reference": "libreswan-debuginfo", "relates_to_product_reference": "openshift-4.15::el9" }, { "category": "default_component_of", "full_product_name": { "name": "libreswan-debuginfo as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.aus::appstream:libreswan-debuginfo" }, "product_reference": "libreswan-debuginfo", "relates_to_product_reference": "rhel-8.2.0.z.aus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "libreswan-debuginfo as a component of Red Hat Enterprise Linux 9.2.0.z", "product_id": "rhel-9.2.0.z.eus:libreswan-debuginfo" }, "product_reference": "libreswan-debuginfo", "relates_to_product_reference": "rhel-9.2.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "libreswan-debuginfo as a component of OpenShift Container Platform 4.17", "product_id": "openshift-4.17::el9:libreswan-debuginfo" }, "product_reference": "libreswan-debuginfo", "relates_to_product_reference": "openshift-4.17::el9" }, { "category": "default_component_of", "full_product_name": { "name": "libreswan-debuginfo as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:libreswan-debuginfo" }, "product_reference": "libreswan-debuginfo", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "libreswan-debuginfo as a component of Red Hat Enterprise Linux 9.1", "product_id": "rhel-9.1.0.z::appstream:libreswan-debuginfo" }, "product_reference": "libreswan-debuginfo", "relates_to_product_reference": "rhel-9.1.0.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "libreswan-debuginfo as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.tus::appstream:libreswan-debuginfo" }, "product_reference": "libreswan-debuginfo", "relates_to_product_reference": "rhel-8.2.0.z.tus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "libreswan-debuginfo as a component of Red Hat Enterprise Linux 8.7", "product_id": "rhel-8.7.0.z::appstream:libreswan-debuginfo" }, "product_reference": "libreswan-debuginfo", "relates_to_product_reference": "rhel-8.7.0.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "libreswan-debuginfo as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.e4s::appstream:libreswan-debuginfo" }, "product_reference": "libreswan-debuginfo", "relates_to_product_reference": "rhel-8.2.0.z.e4s::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "libreswan-debugsource as a component of Red Hat Enterprise Linux 9.2.0.z", "product_id": "rhel-9.2.0.z.eus:libreswan-debugsource" }, "product_reference": "libreswan-debugsource", "relates_to_product_reference": "rhel-9.2.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "libreswan-debugsource as a component of Red Hat Enterprise Linux 8.7", "product_id": "rhel-8.7.0.z::appstream:libreswan-debugsource" }, "product_reference": "libreswan-debugsource", "relates_to_product_reference": "rhel-8.7.0.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "libreswan-debugsource as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.e4s::appstream:libreswan-debugsource" }, "product_reference": "libreswan-debugsource", "relates_to_product_reference": "rhel-8.2.0.z.e4s::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "libreswan-debugsource as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus::appstream:libreswan-debugsource" }, "product_reference": "libreswan-debugsource", "relates_to_product_reference": "rhel-8.4.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "libreswan-debugsource as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.eus::appstream:libreswan-debugsource" }, "product_reference": "libreswan-debugsource", "relates_to_product_reference": "rhel-8.6.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "libreswan-debugsource as a component of Red Hat Enterprise Linux 8.1.0.z", "product_id": "rhel-8.1.0.z.e4s::appstream:libreswan-debugsource" }, "product_reference": "libreswan-debugsource", "relates_to_product_reference": "rhel-8.1.0.z.e4s::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "libreswan-debugsource as a component of OpenShift Container Platform 4.16", "product_id": "openshift-4.16::el9:libreswan-debugsource" }, "product_reference": "libreswan-debugsource", "relates_to_product_reference": "openshift-4.16::el9" }, { "category": "default_component_of", "full_product_name": { "name": "libreswan-debugsource as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-br-8.4.0.z.eus::appstream:libreswan-debugsource" }, "product_reference": "libreswan-debugsource", "relates_to_product_reference": "rhel-br-8.4.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "libreswan-debugsource as a component of Red Hat Enterprise Linux 9.0.0.z", "product_id": "rhel-9.0.0.z.eus::appstream:libreswan-debugsource" }, "product_reference": "libreswan-debugsource", "relates_to_product_reference": "rhel-9.0.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "libreswan-debugsource as a component of OpenShift Container Platform 4.15", "product_id": "openshift-4.15::el9:libreswan-debugsource" }, "product_reference": "libreswan-debugsource", "relates_to_product_reference": "openshift-4.15::el9" }, { "category": "default_component_of", "full_product_name": { "name": "libreswan-debugsource as a component of Red Hat Enterprise Linux 8.8.0.z", "product_id": "rhel-8.8.0.z.eus:libreswan-debugsource" }, "product_reference": "libreswan-debugsource", "relates_to_product_reference": "rhel-8.8.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "libreswan-debugsource as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.aus::appstream:libreswan-debugsource" }, "product_reference": "libreswan-debugsource", "relates_to_product_reference": "rhel-8.2.0.z.aus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "libreswan-debugsource as a component of OpenShift Container Platform 4.17", "product_id": "openshift-4.17::el9:libreswan-debugsource" }, "product_reference": "libreswan-debugsource", "relates_to_product_reference": "openshift-4.17::el9" }, { "category": "default_component_of", "full_product_name": { "name": "libreswan-debugsource as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.tus::appstream:libreswan-debugsource" }, "product_reference": "libreswan-debugsource", "relates_to_product_reference": "rhel-8.2.0.z.tus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "libreswan-debugsource as a component of Red Hat Enterprise Linux 9.1", "product_id": "rhel-9.1.0.z::appstream:libreswan-debugsource" }, "product_reference": "libreswan-debugsource", "relates_to_product_reference": "rhel-9.1.0.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "libreswan.src as a component of Red Hat Enterprise Linux 8.9.0", "product_id": "rhel-8.9.0:libreswan.src" }, "product_reference": "libreswan.src", "relates_to_product_reference": "rhel-8.9.0" }, { "category": "default_component_of", "full_product_name": { "name": "libreswan.src as a component of Red Hat Enterprise Linux 9.3.0", "product_id": "rhel-9.3.0:libreswan.src" }, "product_reference": "libreswan.src", "relates_to_product_reference": "rhel-9.3.0" }, { "category": "default_component_of", "full_product_name": { "name": "libreswan.src as a component of Red Hat Enterprise Linux 8.8.0.z", "product_id": "rhel-8.8.0.z.eus:libreswan.src" }, "product_reference": "libreswan.src", "relates_to_product_reference": "rhel-8.8.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "libreswan.src as a component of Red Hat Enterprise Linux 7.9.z", "product_id": "rhel-7.9.z.els:libreswan.src" }, "product_reference": "libreswan.src", "relates_to_product_reference": "rhel-7.9.z.els" }, { "category": "default_component_of", "full_product_name": { "name": "libreswan.src as a component of Red Hat Enterprise Linux 9.2.0.z", "product_id": "rhel-9.2.0.z.eus:libreswan.src" }, "product_reference": "libreswan.src", "relates_to_product_reference": "rhel-9.2.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "libreswan.src as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:libreswan.src" }, "product_reference": "libreswan.src", "relates_to_product_reference": "rhel-6-els.els" } ] }, "vulnerabilities": [ { "cve": "CVE-2023-30570", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2023-04-17T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "openshift-4.15::el9:libreswan-debuginfo", "openshift-4.15::el9:libreswan-debugsource", "openshift-4.16::el9:libreswan-debuginfo", "openshift-4.16::el9:libreswan-debugsource", "openshift-4.17::el9:libreswan-debuginfo", "openshift-4.17::el9:libreswan-debugsource", "rhel-6-els.els:libreswan-debuginfo", "rhel-7.9.z.els:libreswan", "rhel-7.9.z.els:libreswan.src", "rhel-8.4.0.z.eus::appstream:libreswan-debuginfo", "rhel-8.4.0.z.eus::appstream:libreswan-debugsource", "rhel-8.6.0.z.eus::appstream:libreswan-debuginfo", "rhel-8.6.0.z.eus::appstream:libreswan-debugsource", "rhel-8.8.0.z.eus:libreswan", "rhel-8.8.0.z.eus:libreswan-debuginfo", "rhel-8.8.0.z.eus:libreswan-debugsource", "rhel-8.8.0.z.eus:libreswan.src", "rhel-9.2.0.z.eus:libreswan-debuginfo", "rhel-9.2.0.z.eus:libreswan-debugsource", "rhel-br-8.4.0.z.eus::appstream:libreswan-debuginfo", "rhel-br-8.4.0.z.eus::appstream:libreswan-debugsource" ] } ], "notes": [ { "category": "description", "text": "A vulnerability was found in the libreswan library. This security issue occurs when an IKEv1 Aggressive Mode packet is received with only unacceptable crypto algorithms, and the response packet is not sent with a zero responder SPI. When a subsequent packet is received where the sender reuses the libreswan responder SPI as its own initiator SPI, the pluto daemon state machine crashes. No remote code execution is possible.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "openshift-4.15::el9:libreswan-0:4.6-3.el9_0.3", "openshift-4.15::el9:libreswan-0:4.6-3.el9_0.3.src", "openshift-4.16::el9:libreswan-0:4.6-3.el9_0.3", "openshift-4.16::el9:libreswan-0:4.6-3.el9_0.3.src", "openshift-4.17::el9:libreswan-0:4.6-3.el9_0.3", "openshift-4.17::el9:libreswan-0:4.6-3.el9_0.3.src", "rhel-8.1.0.z.e4s::appstream:libreswan-0:3.29-7.el8_1.2", "rhel-8.1.0.z.e4s::appstream:libreswan-0:3.29-7.el8_1.2.src", "rhel-8.1.0.z.e4s::appstream:libreswan-debuginfo", "rhel-8.1.0.z.e4s::appstream:libreswan-debugsource", "rhel-8.2.0.z.aus::appstream:libreswan-0:3.29-7.el8_2.2", "rhel-8.2.0.z.aus::appstream:libreswan-0:3.29-7.el8_2.2.src", "rhel-8.2.0.z.aus::appstream:libreswan-debuginfo", "rhel-8.2.0.z.aus::appstream:libreswan-debugsource", "rhel-8.2.0.z.e4s::appstream:libreswan-0:3.29-7.el8_2.2", "rhel-8.2.0.z.e4s::appstream:libreswan-0:3.29-7.el8_2.2.src", "rhel-8.2.0.z.e4s::appstream:libreswan-debuginfo", "rhel-8.2.0.z.e4s::appstream:libreswan-debugsource", "rhel-8.2.0.z.tus::appstream:libreswan-0:3.29-7.el8_2.2", "rhel-8.2.0.z.tus::appstream:libreswan-0:3.29-7.el8_2.2.src", "rhel-8.2.0.z.tus::appstream:libreswan-debuginfo", "rhel-8.2.0.z.tus::appstream:libreswan-debugsource", "rhel-8.4.0.z.eus::appstream:libreswan-0:4.3-6.el8_4.1", "rhel-8.4.0.z.eus::appstream:libreswan-0:4.3-6.el8_4.1.src", "rhel-8.6.0.z.eus::appstream:libreswan-0:4.5-1.el8_6.1", "rhel-8.6.0.z.eus::appstream:libreswan-0:4.5-1.el8_6.1.src", "rhel-8.7.0.z::appstream:libreswan-0:4.5-1.el8_7.1", "rhel-8.7.0.z::appstream:libreswan-0:4.5-1.el8_7.1.src", "rhel-8.7.0.z::appstream:libreswan-debuginfo", "rhel-8.7.0.z::appstream:libreswan-debugsource", "rhel-9.0.0.z.eus::appstream:libreswan-0:4.6-3.el9_0.1", "rhel-9.0.0.z.eus::appstream:libreswan-0:4.6-3.el9_0.1.src", "rhel-9.0.0.z.eus::appstream:libreswan-debuginfo", "rhel-9.0.0.z.eus::appstream:libreswan-debugsource", "rhel-9.1.0.z::appstream:libreswan-0:4.6-3.el9_1.1", "rhel-9.1.0.z::appstream:libreswan-0:4.6-3.el9_1.1.src", "rhel-9.1.0.z::appstream:libreswan-debuginfo", "rhel-9.1.0.z::appstream:libreswan-debugsource", "rhel-br-8.4.0.z.eus::appstream:libreswan-0:4.3-6.el8_4.1", "rhel-br-8.4.0.z.eus::appstream:libreswan-0:4.3-6.el8_4.1.src" ], "known_affected": [ "rhel-6-els.els:libreswan", "rhel-6-els.els:libreswan.src", "rhel-8.9.0:libreswan", "rhel-8.9.0:libreswan.src", "rhel-9.2.0.z.eus:libreswan", "rhel-9.2.0.z.eus:libreswan.src", "rhel-9.3.0:libreswan", "rhel-9.3.0:libreswan.src" ], "known_not_affected": [ "openshift-4.15::el9:libreswan-debuginfo", "openshift-4.15::el9:libreswan-debugsource", "openshift-4.16::el9:libreswan-debuginfo", "openshift-4.16::el9:libreswan-debugsource", "openshift-4.17::el9:libreswan-debuginfo", "openshift-4.17::el9:libreswan-debugsource", "rhel-6-els.els:libreswan-debuginfo", "rhel-7.9.z.els:libreswan", "rhel-7.9.z.els:libreswan.src", "rhel-8.4.0.z.eus::appstream:libreswan-debuginfo", "rhel-8.4.0.z.eus::appstream:libreswan-debugsource", "rhel-8.6.0.z.eus::appstream:libreswan-debuginfo", "rhel-8.6.0.z.eus::appstream:libreswan-debugsource", "rhel-8.8.0.z.eus:libreswan", "rhel-8.8.0.z.eus:libreswan-debuginfo", "rhel-8.8.0.z.eus:libreswan-debugsource", "rhel-8.8.0.z.eus:libreswan.src", "rhel-9.2.0.z.eus:libreswan-debuginfo", "rhel-9.2.0.z.eus:libreswan-debugsource", "rhel-br-8.4.0.z.eus::appstream:libreswan-debuginfo", "rhel-br-8.4.0.z.eus::appstream:libreswan-debugsource" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2023-30570" }, { "category": "external", "summary": "nvd.nist.gov", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-30570" }, { "category": "external", "summary": "www.cve.org", "url": "https://www.cve.org/CVERecord?id=CVE-2023-30570" } ], "remediations": [ { "category": "no_fix_planned", "details": "Out of support scope", "product_ids": [ "rhel-6-els.els:libreswan", "rhel-6-els.els:libreswan.src" ] }, { "category": "none_available", "details": "Affected", "product_ids": [ "rhel-8.9.0:libreswan", "rhel-8.9.0:libreswan.src", "rhel-9.2.0.z.eus:libreswan", "rhel-9.2.0.z.eus:libreswan.src", "rhel-9.3.0:libreswan", "rhel-9.3.0:libreswan.src" ] }, { "category": "vendor_fix", "date": "2023-05-04T13:03:30+00:00", "details": "Apply advisory RHSA-2023:2120 as per vendors instructions.", "product_ids": [ "rhel-9.1.0.z::appstream:libreswan-0:4.6-3.el9_1.1", "rhel-9.1.0.z::appstream:libreswan-0:4.6-3.el9_1.1.src", "rhel-9.1.0.z::appstream:libreswan-debuginfo", "rhel-9.1.0.z::appstream:libreswan-debugsource" ], "url": "https://access.redhat.com/errata/RHSA-2023:2120" }, { "category": "vendor_fix", "details": "Apply advisory RHSA-2023:2121 as per vendors instructions.", "product_ids": [ "rhel-9.0.0.z.eus::appstream:libreswan-0:4.6-3.el9_0.1", "rhel-9.0.0.z.eus::appstream:libreswan-0:4.6-3.el9_0.1.src", "rhel-9.0.0.z.eus::appstream:libreswan-debuginfo", "rhel-9.0.0.z.eus::appstream:libreswan-debugsource" ], "url": "https://access.redhat.com/errata/RHSA-2023:2121" }, { "category": "vendor_fix", "date": "2023-05-04T13:18:31+00:00", "details": "Apply advisory RHSA-2023:2122 as per vendors instructions.", "product_ids": [ "rhel-8.7.0.z::appstream:libreswan-0:4.5-1.el8_7.1", "rhel-8.7.0.z::appstream:libreswan-0:4.5-1.el8_7.1.src", "rhel-8.7.0.z::appstream:libreswan-debuginfo", "rhel-8.7.0.z::appstream:libreswan-debugsource" ], "url": "https://access.redhat.com/errata/RHSA-2023:2122" }, { "category": "vendor_fix", "date": "2023-05-04T13:20:30+00:00", "details": "Apply advisory RHSA-2023:2123 as per vendors instructions.", "product_ids": [ "rhel-8.6.0.z.eus::appstream:libreswan-0:4.5-1.el8_6.1", "rhel-8.6.0.z.eus::appstream:libreswan-0:4.5-1.el8_6.1.src" ], "url": "https://access.redhat.com/errata/RHSA-2023:2123" }, { "category": "vendor_fix", "date": "2023-05-04T13:18:08+00:00", "details": "Apply advisory RHSA-2023:2124 as per vendors instructions.", "product_ids": [ "rhel-8.2.0.z.aus::appstream:libreswan-0:3.29-7.el8_2.2", "rhel-8.2.0.z.aus::appstream:libreswan-0:3.29-7.el8_2.2.src", "rhel-8.2.0.z.aus::appstream:libreswan-debuginfo", "rhel-8.2.0.z.aus::appstream:libreswan-debugsource", "rhel-8.2.0.z.e4s::appstream:libreswan-0:3.29-7.el8_2.2", "rhel-8.2.0.z.e4s::appstream:libreswan-0:3.29-7.el8_2.2.src", "rhel-8.2.0.z.e4s::appstream:libreswan-debuginfo", "rhel-8.2.0.z.e4s::appstream:libreswan-debugsource", "rhel-8.2.0.z.tus::appstream:libreswan-0:3.29-7.el8_2.2", "rhel-8.2.0.z.tus::appstream:libreswan-0:3.29-7.el8_2.2.src", "rhel-8.2.0.z.tus::appstream:libreswan-debuginfo", "rhel-8.2.0.z.tus::appstream:libreswan-debugsource" ], "url": "https://access.redhat.com/errata/RHSA-2023:2124" }, { "category": "vendor_fix", "date": "2023-05-04T13:21:11+00:00", "details": "Apply advisory RHSA-2023:2125 as per vendors instructions.", "product_ids": [ "rhel-8.4.0.z.eus::appstream:libreswan-0:4.3-6.el8_4.1", "rhel-8.4.0.z.eus::appstream:libreswan-0:4.3-6.el8_4.1.src", "rhel-br-8.4.0.z.eus::appstream:libreswan-0:4.3-6.el8_4.1", "rhel-br-8.4.0.z.eus::appstream:libreswan-0:4.3-6.el8_4.1.src" ], "url": "https://access.redhat.com/errata/RHSA-2023:2125" }, { "category": "vendor_fix", "date": "2023-05-04T13:19:58+00:00", "details": "Apply advisory RHSA-2023:2126 as per vendors instructions.", "product_ids": [ "rhel-8.1.0.z.e4s::appstream:libreswan-0:3.29-7.el8_1.2", "rhel-8.1.0.z.e4s::appstream:libreswan-0:3.29-7.el8_1.2.src", "rhel-8.1.0.z.e4s::appstream:libreswan-debuginfo", "rhel-8.1.0.z.e4s::appstream:libreswan-debugsource" ], "url": "https://access.redhat.com/errata/RHSA-2023:2126" }, { "category": "vendor_fix", "date": "2025-01-02T20:02:49+00:00", "details": "Apply advisory RHBA-2024:11505 as per vendors instructions.", "product_ids": [ "openshift-4.16::el9:libreswan-0:4.6-3.el9_0.3", "openshift-4.16::el9:libreswan-0:4.6-3.el9_0.3.src" ], "url": "https://access.redhat.com/errata/RHBA-2024:11505" }, { "category": "vendor_fix", "date": "2025-01-02T21:44:24+00:00", "details": "Apply advisory RHBA-2024:11525 as per vendors instructions.", "product_ids": [ "openshift-4.17::el9:libreswan-0:4.6-3.el9_0.3", "openshift-4.17::el9:libreswan-0:4.6-3.el9_0.3.src" ], "url": "https://access.redhat.com/errata/RHBA-2024:11525" }, { "category": "vendor_fix", "date": "2025-01-02T18:44:44+00:00", "details": "Apply advisory RHBA-2024:11565 as per vendors instructions.", "product_ids": [ "openshift-4.15::el9:libreswan-0:4.6-3.el9_0.3", "openshift-4.15::el9:libreswan-0:4.6-3.el9_0.3.src" ], "url": "https://access.redhat.com/errata/RHBA-2024:11565" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH" }, "products": [ "openshift-4.15::el9:libreswan-0:4.6-3.el9_0.3", "openshift-4.15::el9:libreswan-0:4.6-3.el9_0.3.src", "openshift-4.15::el9:libreswan-debuginfo", "openshift-4.15::el9:libreswan-debugsource", "openshift-4.16::el9:libreswan-0:4.6-3.el9_0.3", "openshift-4.16::el9:libreswan-0:4.6-3.el9_0.3.src", "openshift-4.16::el9:libreswan-debuginfo", "openshift-4.16::el9:libreswan-debugsource", "openshift-4.17::el9:libreswan-0:4.6-3.el9_0.3", "openshift-4.17::el9:libreswan-0:4.6-3.el9_0.3.src", "openshift-4.17::el9:libreswan-debuginfo", "openshift-4.17::el9:libreswan-debugsource", "rhel-6-els.els:libreswan", "rhel-6-els.els:libreswan-debuginfo", "rhel-6-els.els:libreswan.src", "rhel-7.9.z.els:libreswan", "rhel-7.9.z.els:libreswan.src", "rhel-8.1.0.z.e4s::appstream:libreswan-0:3.29-7.el8_1.2", "rhel-8.1.0.z.e4s::appstream:libreswan-0:3.29-7.el8_1.2.src", "rhel-8.1.0.z.e4s::appstream:libreswan-debuginfo", "rhel-8.1.0.z.e4s::appstream:libreswan-debugsource", "rhel-8.2.0.z.aus::appstream:libreswan-0:3.29-7.el8_2.2", "rhel-8.2.0.z.aus::appstream:libreswan-0:3.29-7.el8_2.2.src", "rhel-8.2.0.z.aus::appstream:libreswan-debuginfo", "rhel-8.2.0.z.aus::appstream:libreswan-debugsource", "rhel-8.2.0.z.e4s::appstream:libreswan-0:3.29-7.el8_2.2", "rhel-8.2.0.z.e4s::appstream:libreswan-0:3.29-7.el8_2.2.src", "rhel-8.2.0.z.e4s::appstream:libreswan-debuginfo", "rhel-8.2.0.z.e4s::appstream:libreswan-debugsource", "rhel-8.2.0.z.tus::appstream:libreswan-0:3.29-7.el8_2.2", "rhel-8.2.0.z.tus::appstream:libreswan-0:3.29-7.el8_2.2.src", "rhel-8.2.0.z.tus::appstream:libreswan-debuginfo", "rhel-8.2.0.z.tus::appstream:libreswan-debugsource", "rhel-8.4.0.z.eus::appstream:libreswan-0:4.3-6.el8_4.1", "rhel-8.4.0.z.eus::appstream:libreswan-0:4.3-6.el8_4.1.src", "rhel-8.4.0.z.eus::appstream:libreswan-debuginfo", "rhel-8.4.0.z.eus::appstream:libreswan-debugsource", "rhel-8.6.0.z.eus::appstream:libreswan-0:4.5-1.el8_6.1", "rhel-8.6.0.z.eus::appstream:libreswan-0:4.5-1.el8_6.1.src", "rhel-8.6.0.z.eus::appstream:libreswan-debuginfo", "rhel-8.6.0.z.eus::appstream:libreswan-debugsource", "rhel-8.7.0.z::appstream:libreswan-0:4.5-1.el8_7.1", "rhel-8.7.0.z::appstream:libreswan-0:4.5-1.el8_7.1.src", "rhel-8.7.0.z::appstream:libreswan-debuginfo", "rhel-8.7.0.z::appstream:libreswan-debugsource", "rhel-8.8.0.z.eus:libreswan", "rhel-8.8.0.z.eus:libreswan-debuginfo", "rhel-8.8.0.z.eus:libreswan-debugsource", "rhel-8.8.0.z.eus:libreswan.src", "rhel-8.9.0:libreswan", "rhel-8.9.0:libreswan.src", "rhel-9.0.0.z.eus::appstream:libreswan-0:4.6-3.el9_0.1", "rhel-9.0.0.z.eus::appstream:libreswan-0:4.6-3.el9_0.1.src", "rhel-9.0.0.z.eus::appstream:libreswan-debuginfo", "rhel-9.0.0.z.eus::appstream:libreswan-debugsource", "rhel-9.1.0.z::appstream:libreswan-0:4.6-3.el9_1.1", "rhel-9.1.0.z::appstream:libreswan-0:4.6-3.el9_1.1.src", "rhel-9.1.0.z::appstream:libreswan-debuginfo", "rhel-9.1.0.z::appstream:libreswan-debugsource", "rhel-9.2.0.z.eus:libreswan", "rhel-9.2.0.z.eus:libreswan-debuginfo", "rhel-9.2.0.z.eus:libreswan-debugsource", "rhel-9.2.0.z.eus:libreswan.src", "rhel-9.3.0:libreswan", "rhel-9.3.0:libreswan.src", "rhel-br-8.4.0.z.eus::appstream:libreswan-0:4.3-6.el8_4.1", "rhel-br-8.4.0.z.eus::appstream:libreswan-0:4.3-6.el8_4.1.src", "rhel-br-8.4.0.z.eus::appstream:libreswan-debuginfo", "rhel-br-8.4.0.z.eus::appstream:libreswan-debugsource" ] } ], "threats": [ { "category": "impact", "details": "Important", "product_ids": [ "openshift-4.15::el9:libreswan-0:4.6-3.el9_0.3", "openshift-4.15::el9:libreswan-0:4.6-3.el9_0.3.src", "openshift-4.15::el9:libreswan-debuginfo", "openshift-4.15::el9:libreswan-debugsource", "openshift-4.16::el9:libreswan-0:4.6-3.el9_0.3", "openshift-4.16::el9:libreswan-0:4.6-3.el9_0.3.src", "openshift-4.16::el9:libreswan-debuginfo", "openshift-4.16::el9:libreswan-debugsource", "openshift-4.17::el9:libreswan-0:4.6-3.el9_0.3", "openshift-4.17::el9:libreswan-0:4.6-3.el9_0.3.src", "openshift-4.17::el9:libreswan-debuginfo", "openshift-4.17::el9:libreswan-debugsource", "rhel-6-els.els:libreswan", "rhel-6-els.els:libreswan-debuginfo", "rhel-6-els.els:libreswan.src", "rhel-7.9.z.els:libreswan", "rhel-7.9.z.els:libreswan.src", "rhel-8.1.0.z.e4s::appstream:libreswan-0:3.29-7.el8_1.2", "rhel-8.1.0.z.e4s::appstream:libreswan-0:3.29-7.el8_1.2.src", "rhel-8.1.0.z.e4s::appstream:libreswan-debuginfo", "rhel-8.1.0.z.e4s::appstream:libreswan-debugsource", "rhel-8.2.0.z.aus::appstream:libreswan-0:3.29-7.el8_2.2", "rhel-8.2.0.z.aus::appstream:libreswan-0:3.29-7.el8_2.2.src", "rhel-8.2.0.z.aus::appstream:libreswan-debuginfo", "rhel-8.2.0.z.aus::appstream:libreswan-debugsource", "rhel-8.2.0.z.e4s::appstream:libreswan-0:3.29-7.el8_2.2", "rhel-8.2.0.z.e4s::appstream:libreswan-0:3.29-7.el8_2.2.src", "rhel-8.2.0.z.e4s::appstream:libreswan-debuginfo", "rhel-8.2.0.z.e4s::appstream:libreswan-debugsource", "rhel-8.2.0.z.tus::appstream:libreswan-0:3.29-7.el8_2.2", "rhel-8.2.0.z.tus::appstream:libreswan-0:3.29-7.el8_2.2.src", "rhel-8.2.0.z.tus::appstream:libreswan-debuginfo", "rhel-8.2.0.z.tus::appstream:libreswan-debugsource", "rhel-8.4.0.z.eus::appstream:libreswan-0:4.3-6.el8_4.1", "rhel-8.4.0.z.eus::appstream:libreswan-0:4.3-6.el8_4.1.src", "rhel-8.4.0.z.eus::appstream:libreswan-debuginfo", "rhel-8.4.0.z.eus::appstream:libreswan-debugsource", "rhel-8.6.0.z.eus::appstream:libreswan-0:4.5-1.el8_6.1", "rhel-8.6.0.z.eus::appstream:libreswan-0:4.5-1.el8_6.1.src", "rhel-8.6.0.z.eus::appstream:libreswan-debuginfo", "rhel-8.6.0.z.eus::appstream:libreswan-debugsource", "rhel-8.7.0.z::appstream:libreswan-0:4.5-1.el8_7.1", "rhel-8.7.0.z::appstream:libreswan-0:4.5-1.el8_7.1.src", "rhel-8.7.0.z::appstream:libreswan-debuginfo", "rhel-8.7.0.z::appstream:libreswan-debugsource", "rhel-8.8.0.z.eus:libreswan", "rhel-8.8.0.z.eus:libreswan-debuginfo", "rhel-8.8.0.z.eus:libreswan-debugsource", "rhel-8.8.0.z.eus:libreswan.src", "rhel-8.9.0:libreswan", "rhel-8.9.0:libreswan.src", "rhel-9.0.0.z.eus::appstream:libreswan-0:4.6-3.el9_0.1", "rhel-9.0.0.z.eus::appstream:libreswan-0:4.6-3.el9_0.1.src", "rhel-9.0.0.z.eus::appstream:libreswan-debuginfo", "rhel-9.0.0.z.eus::appstream:libreswan-debugsource", "rhel-9.1.0.z::appstream:libreswan-0:4.6-3.el9_1.1", "rhel-9.1.0.z::appstream:libreswan-0:4.6-3.el9_1.1.src", "rhel-9.1.0.z::appstream:libreswan-debuginfo", "rhel-9.1.0.z::appstream:libreswan-debugsource", "rhel-9.2.0.z.eus:libreswan", "rhel-9.2.0.z.eus:libreswan-debuginfo", "rhel-9.2.0.z.eus:libreswan-debugsource", "rhel-9.2.0.z.eus:libreswan.src", "rhel-9.3.0:libreswan", "rhel-9.3.0:libreswan.src", "rhel-br-8.4.0.z.eus::appstream:libreswan-0:4.3-6.el8_4.1", "rhel-br-8.4.0.z.eus::appstream:libreswan-0:4.3-6.el8_4.1.src", "rhel-br-8.4.0.z.eus::appstream:libreswan-debuginfo", "rhel-br-8.4.0.z.eus::appstream:libreswan-debugsource" ] } ], "title": "Malicious IKEv1 Aggressive Mode packets can crash libreswan" } ] }