MGASA-2022-0030

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2022-0030.html

Import Source

https://advisories.mageia.org/MGASA-2022-0030.json

JSON Data

https://api.test.osv.dev/v1/vulns/MGASA-2022-0030

Related

CVE-2022-23094

Published

2022-01-25T12:13:11Z

Modified

2022-01-25T11:29:27Z

Summary

Updated libreswan packages fix security vulnerability

Details

Libreswan 4.2 through 4.5 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted IKEv1 packet because pluto/ikev1.c wrongly expects that a state object exists. (CVE-2022-23094)

References

https://advisories.mageia.org/MGASA-2022-0030.html
https://bugs.mageia.org/show_bug.cgi?id=29900
https://nvd.nist.gov/vuln/detail/CVE-2022-23094
https://libreswan.org/security/CVE-2022-23094/CVE-2022-23094.txt
https://www.debian.org/security/2022/dsa-5048

Credits

- Mageia - COORDINATOR
- - https://wiki.mageia.org/en/Packages_Security_Team

MGASA-2022-0030

Affected packages