Libreswan 4.2 through 4.5 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted IKEv1 packet because pluto/ikev1.c wrongly expects that a state object exists. This is fixed in 4.6.
A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Libreswan | Libreswan | 4.2 (including) | 4.6 (excluding) |
| Red Hat Enterprise Linux 8 | RedHat | libreswan-0:4.4-4.el8_5 | * |
| Red Hat Enterprise Linux 8.4 Extended Update Support | RedHat | libreswan-0:4.3-6.el8_4 | * |
| Libreswan | Ubuntu | bionic | * |
| Libreswan | Ubuntu | hirsute | * |
| Libreswan | Ubuntu | impish | * |
| Libreswan | Ubuntu | kinetic | * |
| Libreswan | Ubuntu | trusty | * |
| Libreswan | Ubuntu | upstream | * |
| Libreswan | Ubuntu | xenial | * |