Every CVE Search/ Get API key

CVE-2020-1763

An out-of-bounds buffer read flaw was found in the pluto daemon of libreswan from versions 3.27...

7.5 HighFix available

CVE-2020-1763 is a high vulnerability (CVSS 7.5) in Libreswan, published May 12, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.57%, the 89th percentile. Fixed in libreswan 3.32-r0.

An out-of-bounds buffer read flaw was found in the pluto daemon of libreswan from versions 3.27 till 3.31 where, an unauthenticated attacker could use this flaw to crash libreswan by sending specially-crafted IKEv1 Informational Exchange packets. The daemon respawns after the crash.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

3.57%Up 1.7 points since Apr 14, 2021
90%50%10%1%

What each source reports

CVE List Score used 7.5

An out-of-bounds buffer read flaw was found in the pluto daemon of libreswan from versions 3.27 till 3.31 where, an unauthenticated attacker could use this flaw to crash libreswan by sending specially-crafted IKEv1 Informational Exchange packets. The daemon respawns after the crash.

Record
CVE-2020-1763
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-125
Updated
2026-11-02
EUVDEUVD-2020-12590 7.5

An out-of-bounds buffer read flaw was found in the pluto daemon of libreswan from versions 3.27 till 3.31 where, an unauthenticated attacker could use this flaw to crash libreswan by sending specially-crafted IKEv1 Informational Exchange packets. The daemon respawns after the crash.

Record
EUVD-2020-12590
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-03
GitHub AdvisoriesGHSA-wx69-vm3h-3cgv No score

An out-of-bounds buffer read flaw was found in the pluto daemon of libreswan from versions 3.27...

An out-of-bounds buffer read flaw was found in the pluto daemon of libreswan from versions 3.27 till 3.31 where, an unauthenticated attacker could use this flaw to crash libreswan by sending specially-crafted IKEv1 Informational Exchange packets. The daemon respawns after the crash.

Record
GHSA-wx69-vm3h-3cgv
Weakness
CWE-125
Updated
2026-11-02
NVD 7.5

An out-of-bounds buffer read flaw was found in the pluto daemon of libreswan from versions 3.27 till 3.31 where, an unauthenticated attacker could use this flaw to crash libreswan by sending specially-crafted IKEv1 Informational Exchange packets. The daemon respawns after the crash.

Record
CVE-2020-1763
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-125
Updated
2026-11-02
OSVALPINE-CVE-2020-1763 7.5

An out-of-bounds buffer read flaw was found in the pluto daemon of libreswan from versions 3.27 till 3.31 where, an unauthenticated attacker could use this flaw to crash libreswan by sending specially-crafted IKEv1 Informational Exchange packets. The daemon respawns after the crash.

Record
ALPINE-CVE-2020-1763
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-03
OSV 7.5

An out-of-bounds buffer read flaw was found in the pluto daemon of libreswan from versions 3.27 till 3.31 where, an unauthenticated attacker could use this flaw to crash libreswan by sending specially-crafted IKEv1 Informational Exchange packets. The daemon respawns after the crash.

Record
CVE-2020-1763
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 6 moreShow less
OSVDEBIAN-CVE-2020-1763 7.5

An out-of-bounds buffer read flaw was found in the pluto daemon of libreswan from versions 3.27 till 3.31 where, an unauthenticated attacker could use this flaw to crash libreswan by sending specially-crafted IKEv1 Informational Exchange packets. The daemon respawns after the crash.

Record
DEBIAN-CVE-2020-1763
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2020:2069 7.5

Red Hat Security Advisory: libreswan security update

Record
RHSA-2020:2069
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2020:2070 7.5

Red Hat Security Advisory: libreswan security update

Record
RHSA-2020:2070
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2020:2071 7.5

Red Hat Security Advisory: libreswan security update

Record
RHSA-2020:2071
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2020-1763 7.5

An out-of-bounds buffer read flaw was found in the pluto daemon of libreswan from versions 3.27 till 3.31 where, an unauthenticated attacker could use this flaw to crash libreswan by sending specially-crafted IKEv1 Informational Exchange packets. The daemon respawns after the crash.

Record
UBUNTU-CVE-2020-1763
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVMGASA-2020-0215 No score

Updated libreswan packages fix security vulnerability

Updated libreswan packages fix security vulnerability:

An out-of-bounds buffer read flaw was found in the pluto daemon of libreswan. An unauthenticated attacker could use this flaw to crash libreswan by sending specially-crafted IKEv1 Informational Exchange packets. The daemon respawns after the crash (CVE-2020-1763).

Record
MGASA-2020-0215
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
libreswan
Alpine:v3.12
 3.27 up to 3.32-r0
3.32-r0
libreswan
Alpine:v3.13
 3.27 up to 3.32-r0
3.32-r0
libreswan
Alpine:v3.14
 3.27 up to 3.32-r0
3.32-r0
libreswan
Alpine:v3.15
 3.27 up to 3.32-r0
3.32-r0
libreswan
Alpine:v3.16
 3.27 up to 3.32-r0
3.32-r0
libreswan
Alpine:v3.17
 3.27 up to 3.32-r0
3.32-r0
libreswan
Alpine:v3.18
 3.27 up to 3.32-r0
3.32-r0
libreswan
Alpine:v3.19
 3.27 up to 3.32-r0
3.32-r0
libreswan
Alpine:v3.20
 3.27 up to 3.32-r0
3.32-r0
libreswan
Alpine:v3.21
 3.27 up to 3.32-r0
3.32-r0
Show 19 moreShow less
Affected packages
PackageAffectedFixed
libreswan
Alpine:v3.22
 3.27 up to 3.32-r0
3.32-r0
libreswan
Alpine:v3.23
 3.27 up to 3.32-r0
3.32-r0
libreswan
Alpine:v3.24
 3.27 up to 3.32-r0
3.32-r0
libreswan
Debian:12
 before 3.32-1
3.32-1
libreswan
Debian:13
 before 3.32-1
3.32-1
libreswan
Debian:14
 before 3.32-1
3.32-1
libreswan
Debian:10
 before 3.27-6+deb10u1, plus listed versions
3.27-6
3.27-6+deb10u1
libreswan
Mageia:7
 before 3.32-1.mga7
3.32-1.mga7
libreswan
Red Hat:rhel_e4s:8.0::appstream
 before 0:3.27-10.el8_0
0:3.27-10.el8_0
libreswan-debuginfo
Red Hat:rhel_e4s:8.0::appstream
 before 0:3.27-10.el8_0
0:3.27-10.el8_0
libreswan-debugsource
Red Hat:rhel_e4s:8.0::appstream
 before 0:3.27-10.el8_0
0:3.27-10.el8_0
libreswan
Red Hat:enterprise_linux:8::appstream
 before 0:3.29-7.el8_2
0:3.29-7.el8_2
libreswan-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:3.29-7.el8_2
0:3.29-7.el8_2
libreswan-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:3.29-7.el8_2
0:3.29-7.el8_2
libreswan
Red Hat:rhel_eus:8.1::appstream
 before 0:3.29-7.el8_1
0:3.29-7.el8_1
libreswan-debuginfo
Red Hat:rhel_eus:8.1::appstream
 before 0:3.29-7.el8_1
0:3.29-7.el8_1
libreswan-debugsource
Red Hat:rhel_eus:8.1::appstream
 before 0:3.29-7.el8_1
0:3.29-7.el8_1
libreswan
Ubuntu:18.04:LTS
 All versions, plus listed versions
3.20-7build13.21-23.22-13.22-23.22-33.22-43.23-13.23-4
 None known
libreswan
Ubuntu:20.04:LTS
 All versions, plus listed versions
3.29-23.29-2build1
 None known

History

History
WhenChangedSources
2026-11-03affected, aliases, referencesOSV
2026-11-03aliases, productsEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD, OSV

References

Show 19 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open