Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
412c37a0 by Salvatore Bonaccorso at 2022-01-12T21:11:23+01:00
Add CVE-2022-23094/libreswan
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -284,8 +284,14 @@ CVE-2022-23096
RESERVED
CVE-2022-23095
RESERVED
-CVE-2022-23094
- RESERVED
+CVE-2022-23094 [Malicious IKEv1 packet can cause libreswan to restart]
+ RESERVED
+ - libreswan <unfixed>
+ [buster] - libreswan <not-affected> (Vulnerable code introduced in 4.2)
+ NOTE: ttps://github.com/libreswan/libreswan/issues/585
+ NOTE: https://libreswan.org/security/CVE-2022-23094/CVE-2022-23094.txt
+ NOTE:
https://libreswan.org/security/CVE-2022-23094/CVE-2022-23094-libreswan-4.2-4.3.patch
(4.2-4.3)
+ NOTE:
https://libreswan.org/security/CVE-2022-23094/CVE-2022-23094-libreswan-4.4-4.5.patch
(4.4-4.5)
CVE-2022-23093
RESERVED
CVE-2022-23092
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/412c37a017160d8e9730ffd1ce75924a0e3b36c1
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/412c37a017160d8e9730ffd1ce75924a0e3b36c1
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
