An issue was discovered in Libreswan before 4.12. When an IKEv1 Quick Mode connection configured with ID_IPV4_ADDR or ID_IPV6_ADDR receives an IDcr payload with ID_FQDN, a NULL pointer dereference causes a crash and restart of the pluto daemon. NOTE: the earliest affected version is 4.6.
Weakness
The product dereferences a pointer that it expects to be valid but is NULL.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Libreswan | Libreswan | 4.6 (including) | 4.12 (excluding) |
| Red Hat Enterprise Linux 8 | RedHat | libreswan-0:4.12-2.el8 | * |
| Red Hat Enterprise Linux 9 | RedHat | libreswan-0:4.12-1.el9 | * |
| Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions | RedHat | libreswan-0:4.6-3.el9_0.3 | * |
| Red Hat Enterprise Linux 9.2 Extended Update Support | RedHat | libreswan-0:4.9-5.el9_2.4 | * |
| Red Hat OpenShift Container Platform 4.15 | RedHat | libreswan-0:4.6-3.el9_0.3 | * |
| Red Hat OpenShift Container Platform 4.16 | RedHat | libreswan-0:4.6-3.el9_0.3 | * |
| Red Hat OpenShift Container Platform 4.17 | RedHat | libreswan-0:4.6-3.el9_0.3 | * |
| Libreswan | Ubuntu | bionic | * |
| Libreswan | Ubuntu | focal | * |
| Libreswan | Ubuntu | lunar | * |
| Libreswan | Ubuntu | mantic | * |
| Libreswan | Ubuntu | oracular | * |
| Libreswan | Ubuntu | plucky | * |
| Libreswan | Ubuntu | trusty | * |
| Libreswan | Ubuntu | xenial | * |