Threat Investigation
Request a demo

CVE-2019-12312

High

Description

In Libreswan 3.27 an assertion failure can lead to a pluto IKE daemon restart. An attacker can trigger a NULL pointer dereference by initiating an IKEv2 IKE_SA_INIT exchange, followed by a bogus INFORMATIONAL exchange instead of the normallly expected IKE_AUTH exchange. This affects send_v2N_spi_response_from_state() in programs/pluto/ikev2_send.c that will then trigger a NULL pointer dereference leading to a restart of libreswan.

SeverityHigh
CVSS7.5
Exploit probability—
ProductLibreswan
PublishedMay 24, 2019
First seenMay 24, 2019

How to fix

Update
  • libreswan libreswan3.28 or later

Affected products

ProductAffected versionsFixed in
libreswan libreswanv < 3.283.28

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.