CVE-2020-1763

Name of the Vulnerable Software and Affected Versions libreswan versions 3.27 through 3.31

Description An out-of-bounds buffer read flaw was found in the pluto daemon of libreswan, where an unauthenticated attacker could use this flaw to crash libreswan by sending specially-crafted IKEv1 Informational Exchange packets. The daemon respawns after the crash. This issue allows a remote attacker to cause a denial of service.

Recommendations For libreswan versions 3.27 through 3.31, as a temporary workaround, consider restricting access to the pluto daemon to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.