CVE:CVE-2023-2295
CNNVD:CNNVD-202305-344
Libreswan是一个类似于Openswan的IPsec实现，它主要用于保证数据传输中的安全性、完整性问题。
Libreswan存在安全漏洞，该漏洞源于当仅使用不可接受的加密算法接收IKEv1攻击模式数据包并且未使用零响应者SPI发送响应数据包时，pluto守护进程状态机会崩溃。
solution:Upgrade libreswan libreswan to a higher version than 4.9-1.el8,4.9-1.el9,and avoid the version 4.9-1.el8,4.9-1.el9; Upgrade redhat enterprise_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade redhat enterprise_linux_eus to a higher version than 8.8,9.2,and avoid the version 8.8,9.2; Upgrade redhat enterprise_linux_server_aus to a higher version than 8.8,9.2,and avoid the version 8.8,9.2; Upgrade redhat enterprise_linux_server_tus to a higher version than 8.8,and avoid the version 8.8