Published: 24/05/2019 Updated: 24/08/2020

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Impact: Moderate Public Date: 2019-05-12 CWE: CWE-476 Bugzilla: 1716918: CVE-2019-12312 libreswan: null-pointer dereference by sending two IKEv2 packets In Libreswan prior to 3.28, an assertion failure can lead to a pluto IKE daemon restart. An attacker can trigger a NULL pointer dereference by sending two IKEv2 packets (init_IKE and delete_IKE) in 3des_cbc mode to a Libreswan server. This affects send_v2N_spi_response_from_state in programs/pluto/ikev2_send.c when built with Network Security Services (NSS).

Vulnerable Product	Search on Vulmon	Subscribe to Product
libreswan libreswan

Debian Bug report logs - #930338 CVE-2019-10155 IKEv1 Informational exchange integrity check failure Package: libreswan; Maintainer for libreswan is Daniel Kahn Gillmor <dkg@fifthhorsemannet>; Source for libreswan is src:libreswan (PTS, buildd, popcon) Reported by: Daniel Kahn Gillmor <dkg@fifthhorsemannet> Date: ...

Debian Bug report logs - #929916 libreswan: CVE-2019-12312 Package: src:libreswan; Maintainer for src:libreswan is Daniel Kahn Gillmor <dkg@fifthhorsemannet>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Mon, 3 Jun 2019 04:30:02 UTC Severity: grave Tags: fixed-upstream, patch, security, upstream Fou ...

Impact: Moderate Public Date: 2019-05-12 CWE: CWE-476 Bugzilla: 1716918: CVE-2019-12312 libreswan: null ...

CWE-476 CWE-617 https://github.com/libreswan/libreswan/issues/246 https://github.com/libreswan/libreswan/compare/9b1394e...3897683 http://www.iwantacve.cn/index.php/archives/218/https://libreswan.org/security/CVE-2019-12312/libreswan-3.27-CVE-2019-12312.patch https://libreswan.org/security/CVE-2019-12312/CVE-2019-12312.txt https://nvd.nist.gov https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=930338 https://access.redhat.com/security/cve/cve-2019-12312

CVE-2019-12312

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect