VDB
CVE-2023-30570
CVE-2023-30570
PUBLISHED
Es existiert eine Schwachstelle u.a. in Red Hat Enterprise Linux und Fedora Linux bezüglich "libreswan". Der Fehler besteht aufgrund einer fehlerhaften Behandlung von nicht unterstützten Algorithmen bei der Verarbeitung von IKEv1 Aggressive Mode Paketen im "libreswan pluto daemon". Ein entfernter, anonymer Angreifer kann diese Schwachstelle ausnutzen, indem er ein speziell präpariertes IKEv1 Aggressive Mode-Paket an den Daemon sendet, um einen Denial-of-Service-Zustand auszulösen.
EPSS 0.19% · 40.1th percentile
Risk Scores
EPSS Score
0.19%
40.1th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions | |
| Red Hat | Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions | |
| Fedora | Fedora Linux | |
| Red Hat | Red Hat Enterprise Linux | |
| Red Hat | Red Hat Enterprise Linux 9.0 Extended Update Support | |
| Red Hat | Red Hat Enterprise Linux 8.2 Telecommunications Update Service | |
| Oracle | Oracle Linux | |
| Red Hat | Red Hat Enterprise Linux 8.2 Advanced Update Support | |
| Red Hat | Red Hat Enterprise Linux 8.4 Extended Update Support | |
| Red Hat | Red Hat Enterprise Linux 8 | |
| Red Hat | Red Hat Enterprise Linux 8.6 Extended Update Support | |
| Red Hat | Red Hat Enterprise Linux 9 |
Exploit Intelligence
Timeline
- May 4, 2023 CVE Published
- May 29, 2023 EPSS Score
- Jul 4, 2023 EPSS Score
- Aug 9, 2023 EPSS Score
- Sep 14, 2023 EPSS Score
- Oct 20, 2023 EPSS Score
- Nov 26, 2023 EPSS Score
- Jan 1, 2024 EPSS Score
- Feb 6, 2024 EPSS Score
- Apr 18, 2024 EPSS Score
- Apr 24, 2024 CVE Updated
- May 24, 2024 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-1149.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-1149 advisory
- https://access.redhat.com/errata/RHSA-2023:2120 advisory
- https://access.redhat.com/errata/RHSA-2023:2121 advisory
- https://access.redhat.com/errata/RHSA-2023:2122 advisory
- https://access.redhat.com/errata/RHSA-2023:2123 advisory
- https://access.redhat.com/errata/RHSA-2023:2124 advisory
- https://access.redhat.com/errata/RHSA-2023:2125 advisory
- https://access.redhat.com/errata/RHSA-2023:2126 advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-2023-19046bf703 advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-2023-30f824b8b8 advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-2023-60faf77aca advisory
- http://linux.oracle.com/errata/ELSA-2023-2122.html advisory
- http://linux.oracle.com/errata/ELSA-2023-2120.html advisory
- https://access.redhat.com/errata/RHSA-2023:3107 advisory
- https://access.redhat.com/errata/RHSA-2023:3148 advisory
- https://oss.oracle.com/pipermail/el-errata/2023-May/013986.html advisory
- https://linux.oracle.com/errata/ELSA-2023-3107.html advisory
- http://linux.oracle.com/errata/ELSA-2024-2033.html advisory