CVE-2020-1763
HIGH7.5EPSS 5.7%libreswan - security update
Published: 5/12/2020Modified: 5/29/2026
Also known as:DEBIAN-CVE-2020-1763
Description
An out-of-bounds buffer read flaw was found in the pluto daemon of libreswan from versions 3.27 till 3.31 where, an unauthenticated attacker could use this flaw to crash libreswan by sending specially-crafted IKEv1 Informational Exchange packets. The daemon respawns after the crash.
Affected packages (2)
- Debian/libreswanfrom 0, < 3.32-1
- Debian/libreswanfrom 0, < 3.27-6+deb10u1
CVSS scores
| Source | Version | Severity | Vector |
|---|---|---|---|
| osv | CVSS 3.1 | HIGH7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |