Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An out-of-bounds buffer read flaw was found in the pluto daemon of libreswan from versions 3.27 till 3.31 where, an unauthenticated attacker could use this flaw to crash libreswan by sending specially-crafted IKEv1 Informational Exchange packets. The daemon respawns after the crash.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Vulnerability Type
跨界内存读
Vulnerability Title
Libreswan 缓冲区错误漏洞
Vulnerability Description
Libreswan是一个类似于Openswan的IPsec实现，它主要用于保证数据传输中的安全性、完整性问题。 libreswan 3.27版本至3.31版本中的pluto守护进程存在缓冲区错误漏洞。攻击者可通过发送特制的IKEv1 Informational Exchange数据包利用该漏洞使libreswan崩溃。
CVSS Information
N/A
Vulnerability Type
N/A