CVE & CISA-KEV CatalogNVD
CVE-2023-2295
HIGHEPSS 73th pctl7.5
CVSS v3
Description
A vulnerability was found in the libreswan library. This security issue occurs when an IKEv1 Aggressive Mode packet is received with only unacceptable crypto algorithms, and the response packet is not sent with a zero responder SPI. When a subsequent packet is received where the sender reuses the libreswan responder SPI as its own initiator SPI, the pluto daemon state machine crashes. No remote code execution is possible. This CVE exists because of a CVE-2023-30570 security regression for libreswan package in Red Hat Enterprise Linux 8.8 and Red Hat Enterprise Linux 9.2.
How to fix
Remediation Available
libreswanRocky
Fixed in:0:4.9-3.el8_8RHSA-2023:3107
Fixed in:0:4.9-3.el8_8RHSA-2023:3107
Fixed in:0:4.9-3.el8_8RHSA-2023:3107
Fixed in:0:4.9-3.el8_8RHSA-2023:3107
Fixed in:0:4.9-3.el8_8RHSA-2023:3107
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11505
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11565
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11565
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11565
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11525
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11525
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11525
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11525
Fixed in:0:4.6-3.el9_0.3RHSA-2024:10594
Fixed in:0:4.6-3.el9_0.3RHSA-2024:10594
Fixed in:0:4.6-3.el9_0.3RHSA-2024:10594
Fixed in:0:4.6-3.el9_0.3RHSA-2024:10594
Fixed in:0:4.6-3.el9_0.3RHSA-2024:10594
Fixed in:0:4.9-4.el9_2RHSA-2023:3148
Fixed in:0:4.9-4.el9_2RHSA-2023:3148
Fixed in:0:4.9-4.el9_2RHSA-2023:3148
Fixed in:0:4.9-4.el9_2RHSA-2023:3148
Fixed in:0:4.9-4.el9_2RHSA-2023:3148
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11505
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11505
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11505
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11505
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11565
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11525
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11565
libreswanRed Hat / RHEL
Fixed in:0:4.9-3.el8_8RHSA-2023:3107
Fixed in:0:4.9-3.el8_8RHSA-2023:3107
Fixed in:0:4.9-3.el8_8RHSA-2023:3107
Fixed in:0:4.9-3.el8_8RHSA-2023:3107
Fixed in:0:4.9-3.el8_8RHSA-2023:3107
Fixed in:0:4.6-3.el9_0.3RHSA-2024:10594
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11525
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11565
Fixed in:0:4.6-3.el9_0.3RHSA-2024:10594
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11565
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11565
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11525
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11565
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11565
Fixed in:0:4.6-3.el9_0.3RHSA-2024:10594
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11525
Fixed in:0:4.9-4.el9_2RHSA-2023:3148
Fixed in:0:4.9-4.el9_2RHSA-2023:3148
Fixed in:0:4.9-4.el9_2RHSA-2023:3148
Fixed in:0:4.9-4.el9_2RHSA-2023:3148
Fixed in:0:4.9-4.el9_2RHSA-2023:3148
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11505
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11505
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11505
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11505
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11505
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11525
Fixed in:0:4.6-3.el9_0.3RHSA-2024:10594
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11525
Fixed in:0:4.6-3.el9_0.3RHSA-2024:10594
libreswan-debuginfoRocky
Fixed in:0:4.9-3.el8_8RHSA-2023:3107
Fixed in:0:4.9-3.el8_8RHSA-2023:3107
Fixed in:0:4.9-3.el8_8RHSA-2023:3107
Fixed in:0:4.9-3.el8_8RHSA-2023:3107
Fixed in:0:4.9-4.el9_2RHSA-2023:3148
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11505
Fixed in:0:4.9-4.el9_2RHSA-2023:3148
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11565
Fixed in:0:4.9-4.el9_2RHSA-2023:3148
Fixed in:0:4.9-4.el9_2RHSA-2023:3148
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11505
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11525
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11525
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11505
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11525
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11505
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11565
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11565
Fixed in:0:4.6-3.el9_0.3RHSA-2024:10594
Fixed in:0:4.6-3.el9_0.3RHSA-2024:10594
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11565
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11525
Fixed in:0:4.6-3.el9_0.3RHSA-2024:10594
Fixed in:0:4.6-3.el9_0.3RHSA-2024:10594
libreswan-debuginfoRed Hat / RHEL
Fixed in:0:4.9-3.el8_8RHSA-2023:3107
Fixed in:0:4.9-3.el8_8RHSA-2023:3107
Fixed in:0:4.9-3.el8_8RHSA-2023:3107
Fixed in:0:4.9-3.el8_8RHSA-2023:3107
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11565
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11525
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11525
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11565
Fixed in:0:4.6-3.el9_0.3RHSA-2024:10594
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11525
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11505
Fixed in:0:4.6-3.el9_0.3RHSA-2024:10594
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11525
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11505
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11505
Fixed in:0:4.9-4.el9_2RHSA-2023:3148
Fixed in:0:4.6-3.el9_0.3RHSA-2024:10594
Fixed in:0:4.9-4.el9_2RHSA-2023:3148
Fixed in:0:4.6-3.el9_0.3RHSA-2024:10594
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11565
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11565
Fixed in:0:4.9-4.el9_2RHSA-2023:3148
Fixed in:0:4.9-4.el9_2RHSA-2023:3148
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11505
libreswan-debugsourceRed Hat / RHEL
Fixed in:0:4.9-3.el8_8RHSA-2023:3107
Fixed in:0:4.9-3.el8_8RHSA-2023:3107
Fixed in:0:4.9-3.el8_8RHSA-2023:3107
Fixed in:0:4.9-3.el8_8RHSA-2023:3107
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11525
Fixed in:0:4.6-3.el9_0.3RHSA-2024:10594
Fixed in:0:4.6-3.el9_0.3RHSA-2024:10594
Fixed in:0:4.6-3.el9_0.3RHSA-2024:10594
Fixed in:0:4.6-3.el9_0.3RHSA-2024:10594
Fixed in:0:4.9-4.el9_2RHSA-2023:3148
Fixed in:0:4.9-4.el9_2RHSA-2023:3148
Fixed in:0:4.9-4.el9_2RHSA-2023:3148
Fixed in:0:4.9-4.el9_2RHSA-2023:3148
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11505
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11505
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11505
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11505
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11525
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11525
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11565
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11565
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11565
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11565
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11525
libreswan-debugsourceRocky
Fixed in:0:4.9-3.el8_8RHSA-2023:3107
Fixed in:0:4.9-3.el8_8RHSA-2023:3107
Fixed in:0:4.9-3.el8_8RHSA-2023:3107
Fixed in:0:4.9-3.el8_8RHSA-2023:3107
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11525
Fixed in:0:4.6-3.el9_0.3RHSA-2024:10594
Fixed in:0:4.6-3.el9_0.3RHSA-2024:10594
Fixed in:0:4.6-3.el9_0.3RHSA-2024:10594
Fixed in:0:4.6-3.el9_0.3RHSA-2024:10594
Fixed in:0:4.9-4.el9_2RHSA-2023:3148
Fixed in:0:4.9-4.el9_2RHSA-2023:3148
Fixed in:0:4.9-4.el9_2RHSA-2023:3148
Fixed in:0:4.9-4.el9_2RHSA-2023:3148
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11505
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11505
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11505
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11505
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11565
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11565
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11565
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11565
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11525
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11525
Fixed in:0:4.6-3.el9_0.3RHBA-2024:11525
openshiftRocky
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el8RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el9RHBA-2024:11525
openshiftRed Hat / RHEL
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el8RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el9RHBA-2024:11525
openshift-hyperkubeRed Hat / RHEL
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el8RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el8RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el8RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el8RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el9RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el9RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el9RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el9RHBA-2024:11525
openshift-hyperkubeRocky
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el8RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el8RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el8RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el8RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el9RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el9RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el9RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el9RHBA-2024:11525
openshift-kube-apiserverRocky
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el8RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el8RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el8RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el8RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el9RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el9RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el9RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el9RHBA-2024:11525
openshift-kube-apiserverRed Hat / RHEL
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el8RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el8RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el8RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el8RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el9RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el9RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el9RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el9RHBA-2024:11525
openshift-kube-controller-managerRocky
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el8RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el8RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el8RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el8RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el9RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el9RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el9RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el9RHBA-2024:11525
openshift-kube-controller-managerRed Hat / RHEL
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el8RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el8RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el8RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el8RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el9RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el9RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el9RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el9RHBA-2024:11525
openshift-kube-schedulerRed Hat / RHEL
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el8RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el8RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el8RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el8RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el9RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el9RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el9RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el9RHBA-2024:11525
openshift-kube-schedulerRocky
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el8RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el8RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el8RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el8RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el9RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el9RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el9RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el9RHBA-2024:11525
openshift-kubeletRocky
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el8RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el8RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el8RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el8RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el9RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el9RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el9RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el9RHBA-2024:11525
openshift-kubeletRed Hat / RHEL
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el8RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el8RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el8RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el8RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el9RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el9RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el9RHBA-2024:11525
Fixed in:0:4.17.0-202412172334.p0.gf868289.assembly.stream.el9RHBA-2024:11525
Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.
CVSS v3 Vector
Exploitability
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredNone
User InteractionNone
ScopeUnchanged
Impact
ConfidentialityNone
IntegrityNone
AvailabilityHigh
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploit Intelligence
1.58%probability of exploitation in 30 days
73rdpercentile
Elevated risk: more likely to be exploited than 73% of all known CVEs.
References
Third-Party Advisory3
Issue Tracking1
Related Vulnerabilities
Other CWE-400 (Resource Exhaustion) vulnerabilities, ordered by exploit likelihood. View all
| CVE | Severity | CVSS | EPSS | Exploited | Fix |
|---|---|---|---|---|---|
| CVE-2023-44487 | High | 7.5 | 100% | KEV | Fix |
| CVE-2021-44228 | Critical | 10.0 | 100% | KEV + Ransom | Fix |
| CVE-2011-3192 | High | 7.8 | 99% | - | Fix |
| CVE-2019-11478 | Medium | 5.3 | 95% | - | Fix |
| CVE-2024-25617 | Medium | 5.3 | 89% | - | Fix |
| CVE-2018-1000115 | High | 7.5 | 89% | - | Fix |
Embed a live status badge for CVE-2023-2295
Markdown
[](https://tridentstack.com/cve/CVE-2023-2295)HTML
<a href="https://tridentstack.com/cve/CVE-2023-2295"><img src="https://tridentstack.com/cve/badge/CVE-2023-2295.svg" alt="CVE-2023-2295"></a>Find and fix vulnerabilities across your fleet
TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.
Start freeThis product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2025-01-22.