tocsin

Alpine/libreswan: high 7.5

An invalidly formatted IKEv2 fragment causes the Libreswan pluto daemon to crash and restart. Continued exploitation would cause a denial of service. The function reassemble_v2_incoming_fragments() wo

Action: Upgrade libreswan to 5.3.3-r0 or later.

Affected

introducedfixedlast affected
4.65.3.3-r0-

Fixed versions

5.3.3-r0

Sources

published · modified · JSON