VDB

GCVE-110-MAGEIA-2023-89

GCVE-110-MAGEIA-2023-89
Advisory Published
Vulnetix · Advisory published March 11, 2023
A change in the libreswan 4.2 Traffic Selector parsing code introduced a missing check that would reject palformed Traffic Selector payloads. As such, in such case the code stumbles on to hit a double free, leading to a crash and restart of the pluto daemon. No remote code execution. (CVE-2023-23009)

Affected Products

VendorProductVersionsPlatforms
Mageialibreswan0 (affected), 4.6-4.1.mga8 (unaffected)—

Browse GCVE Records

868 records in the GCVE database · Updated October 28, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 50/day Open console ›