pluto in Libreswan before 4.11 allows a denial of service (responder SPI mishandling and daemon crash) via unauthenticated IKEv1 Aggressive Mode packets. The earliest affected version is 3.28.

The remote CentOS Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the libreswan-4.9-4.el9 build changelog.

  - remote DoS via crafted TS payload with an incorrect selector length (rhbz#2173674) (CVE-2023-23009)

  - pluto in Libreswan before 4.11 allows a denial of service (responder SPI mishandling and daemon crash) via     unauthenticated IKEv1 Aggressive Mode packets. The earliest affected version is 3.28. (CVE-2023-30570)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2023:2122 advisory.

  - pluto in Libreswan before 4.11 allows a denial of service (responder SPI mishandling and daemon crash) via     unauthenticated IKEv1 Aggressive Mode packets. The earliest affected version is 3.28. (CVE-2023-30570)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-19046bf703 advisory.

  - pluto in Libreswan before 4.11 allows a denial of service (responder SPI mishandling and daemon crash) via     unauthenticated IKEv1 Aggressive Mode packets. The earliest affected version is 3.28. (CVE-2023-30570)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-60faf77aca advisory.

  - pluto in Libreswan before 4.11 allows a denial of service (responder SPI mishandling and daemon crash) via     unauthenticated IKEv1 Aggressive Mode packets. The earliest affected version is 3.28. (CVE-2023-30570)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-30f824b8b8 advisory.

  - pluto in Libreswan before 4.11 allows a denial of service (responder SPI mishandling and daemon crash) via     unauthenticated IKEv1 Aggressive Mode packets. The earliest affected version is 3.28. (CVE-2023-30570)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2023-2120 advisory.

  - pluto in Libreswan before 4.11 allows a denial of service (responder SPI mishandling and daemon crash) via     unauthenticated IKEv1 Aggressive Mode packets. The earliest affected version is 3.28. (CVE-2023-30570)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2023:2122 advisory.

  - pluto in Libreswan before 4.11 allows a denial of service (responder SPI mishandling and daemon crash) via     unauthenticated IKEv1 Aggressive Mode packets. The earliest affected version is 3.28. (CVE-2023-30570)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2023-2122 advisory.

  - pluto in Libreswan before 4.11 allows a denial of service (responder SPI mishandling and daemon crash) via     unauthenticated IKEv1 Aggressive Mode packets. The earliest affected version is 3.28. (CVE-2023-30570)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:2126 advisory.

  - libreswan: Malicious IKEv1 Aggressive Mode packets can crash libreswan (CVE-2023-30570)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:2121 advisory.

  - libreswan: Malicious IKEv1 Aggressive Mode packets can crash libreswan (CVE-2023-30570)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:2120 advisory.

  - libreswan: Malicious IKEv1 Aggressive Mode packets can crash libreswan (CVE-2023-30570)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:2125 advisory.

  - libreswan: Malicious IKEv1 Aggressive Mode packets can crash libreswan (CVE-2023-30570)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:2124 advisory.

  - libreswan: Malicious IKEv1 Aggressive Mode packets can crash libreswan (CVE-2023-30570)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:2123 advisory.

  - libreswan: Malicious IKEv1 Aggressive Mode packets can crash libreswan (CVE-2023-30570)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:2122 advisory.

  - libreswan: Malicious IKEv1 Aggressive Mode packets can crash libreswan (CVE-2023-30570)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
191415	CentOS 9 : libreswan-4.9-4.el9	Nessus	CentOS Local Security Checks	high
190154	CentOS 8 : libreswan (CESA-2023:2122)	Nessus	CentOS Local Security Checks	high
175455	Fedora 38 : libreswan (2023-19046bf703)	Nessus	Fedora Local Security Checks	high
175454	Fedora 37 : libreswan (2023-60faf77aca)	Nessus	Fedora Local Security Checks	high
175453	Fedora 36 : libreswan (2023-30f824b8b8)	Nessus	Fedora Local Security Checks	high
175151	Oracle Linux 9 : libreswan (ELSA-2023-2120)	Nessus	Oracle Linux Local Security Checks	high
175144	AlmaLinux 8 : libreswan (ALSA-2023:2122)	Nessus	Alma Linux Local Security Checks	high
175140	Oracle Linux 8 : libreswan (ELSA-2023-2122)	Nessus	Oracle Linux Local Security Checks	high
175119	RHEL 8 : libreswan (RHSA-2023:2126)	Nessus	Red Hat Local Security Checks	high
175118	RHEL 9 : libreswan (RHSA-2023:2121)	Nessus	Red Hat Local Security Checks	high
175117	RHEL 9 : libreswan (RHSA-2023:2120)	Nessus	Red Hat Local Security Checks	high
175114	RHEL 8 : libreswan (RHSA-2023:2125)	Nessus	Red Hat Local Security Checks	high
175113	RHEL 8 : libreswan (RHSA-2023:2124)	Nessus	Red Hat Local Security Checks	high
175112	RHEL 8 : libreswan (RHSA-2023:2123)	Nessus	Red Hat Local Security Checks	high
175111	RHEL 8 : libreswan (RHSA-2023:2122)	Nessus	Red Hat Local Security Checks	high

Detections

Analytics

CVE-2023-30570

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high