CVE-2020-1763: libreswan Out-of-bounds Read
CVSS: 7.5v3.1HighModified
AliasesMGASA-2020-0215RHSA-2020:2069RHSA-2020:2070RHSA-2020:2071UBUNTU-CVE-2020-1763DEBIAN-CVE-2020-1763DSA-4684-1
Published 12-05-2020Last modified 04-08-2024
Vulnerability summary
CVE-2020-1763 is a high (CVSS 7.5) Out-of-bounds Read vulnerability in libreswan. EPSS estimates a 3.57% chance of exploitation in the next 30 days, higher than 89.2% of scored vulnerabilities.
CVSS score
7.5/10
010
High · v3.1 (CVE.org)EPSS score
3.57%
0%100%
Low · +0.29 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Timeline
- 12-05-2020PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
An out-of-bounds buffer read flaw was found in the pluto daemon of libreswan from versions 3.27 till 3.31 where, an unauthenticated attacker could use this flaw to crash libreswan by sending specially-crafted IKEv1 Informational Exchange packets. The daemon respawns after the crash.
CVSS metrics
6 scores · 5 sources · 2 versionsHigh 7.5Preferred score · CVE.org (CNA)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HSourcesAll 5 agree
- OSV · Red hatEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- OSV · UbuntuEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- NVDNIST7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Medium 5.0Preferred score · NVD (NIST)
AV:N/AC:L/Au:N/C:N/I:N/A:PSourcesSingle source
EPSS trend
Probability
3.57%
Chance of exploitation in the next 30 days
Percentile
89%
Versus all other CVEs
30-day change
+0.29 pp
From 3.29% on 19-09-2026
19-09-202619-10-2026
EPSS score3.57%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Redhat3 products
- libreswan< 0:3.27-10.el8_0 | < 0:3.29-7.el8_2 | < 0:3.29-7.el8_1
- libreswan-debuginfo< 0:3.27-10.el8_0 | < 0:3.29-7.el8_2 | < 0:3.29-7.el8_1
- libreswan-debugsource< 0:3.27-10.el8_0 | < 0:3.29-7.el8_2 | < 0:3.29-7.el8_1
Debian1 product
- libreswan< 3.32-1 | < 3.27-6+deb10u1
Libreswan1 product
- libreswan≥ 3.27, ≤ 3.31 | 3.5
Mageia1 product
- libreswan< 3.32-1.mga7
The libreswan project1 product
- libreswanfrom versions 3.27 till 3.31
Ubuntu1 product
- libreswanAll versions (No fix recorded)
6 vendors · 8 products
References
23 links- libreswan.org/security/CVE-2020-1763/CVE-2020-1763.txtX Refsource CONFIRMAdvisoryARTICLEREPORTPatchVendor Advisory
- bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1763X Refsource CONFIRMREPORTIssue TrackingThird Party Advisory
- github.com/libreswan/libreswan/commit/471a3e41a449d7c753bc4edbba4239501bb62ba8X Refsource CONFIRMREPORTPatchThird Party Advisory
us-cert.cisa.gov/ics/advisories/icsa-21-040-04X Refsource MISCThird Party AdvisoryUS Government Resource
