vulnerability

Red Hat OpenShift: CVE-2023-23009: libreswan: remote DoS via crafted TS payload with an incorrect selector length

Name: Red Hat OpenShift: CVE-2023-23009: libreswan: remote DoS via crafted TS payload with an incorrect selector length
Creator: Red Hat
Published: 2023-02-21T00:00:00.000Z
Keywords: CVE, CWE-400, Red Hat OpenShift, 2023, 23009, libreswan, linuxrpm-upgrade-libreswan, Severity 7

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:L/Au:S/C:N/I:N/A:C)

Published

Feb 21, 2023

Added

Jan 10, 2025

Modified

Mar 30, 2026

Description

Libreswan 4.9 allows remote attackers to cause a denial of service (assert failure and daemon restart) via crafted TS payload with an incorrect selector length.

Solution

linuxrpm-upgrade-libreswan

References

CVE-2023-23009
https://attackerkb.com/topics/CVE-2023-23009
CWE-400
EUVD-EUVD-2023-27109
REDHAT-RHSA-2023:2633
REDHAT-RHSA-2023:3095
REDHAT-RHSA-2024:10594
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-27109

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report