{"id":"CVE-2020-1763","aliases":["ALPINE-CVE-2020-1763","DEBIAN-CVE-2020-1763","DSA-4684-1","EUVD-2020-12590","GHSA-wx69-vm3h-3cgv","MGASA-2020-0215","RHSA-2020:2069","RHSA-2020:2070","RHSA-2020:2071","UBUNTU-CVE-2020-1763"],"status":"published","title":"An out-of-bounds buffer read flaw was found in the pluto daemon of libreswan from versions 3.27...","description":"An out-of-bounds buffer read flaw was found in the pluto daemon of libreswan from versions 3.27 till 3.31 where, an unauthenticated attacker could use this flaw to crash libreswan by sending specially-crafted IKEv1 Informational Exchange packets. The daemon respawns after the crash.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.03575,"percentile":0.89538,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125"],"published":"2020-05-12T13:41:20Z","modified":"2026-11-06T17:26:37Z","fixes":[{"ecosystem":"Alpine:v3.12","package":"libreswan","fixed_in":["3.32-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"libreswan","fixed_in":["3.32-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"libreswan","fixed_in":["3.32-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"libreswan","fixed_in":["3.32-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"libreswan","fixed_in":["3.32-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"libreswan","fixed_in":["3.32-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"libreswan","fixed_in":["3.32-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"libreswan","fixed_in":["3.32-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"libreswan","fixed_in":["3.32-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"libreswan","fixed_in":["3.32-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"libreswan","fixed_in":["3.32-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"libreswan","fixed_in":["3.32-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"libreswan","fixed_in":["3.32-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libreswan","fixed_in":["3.32-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libreswan","fixed_in":["3.32-1"],"sources":["osv"]},{"ecosystem":"Debian:10","package":"libreswan","fixed_in":["3.27-6+deb10u1"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"libreswan","fixed_in":["3.32-1.mga7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"libreswan","fixed_in":["0:3.27-10.el8_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"libreswan-debuginfo","fixed_in":["0:3.27-10.el8_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"libreswan-debugsource","fixed_in":["0:3.27-10.el8_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libreswan","fixed_in":["0:3.29-7.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libreswan-debuginfo","fixed_in":["0:3.29-7.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libreswan-debugsource","fixed_in":["0:3.29-7.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"libreswan","fixed_in":["0:3.29-7.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"libreswan-debuginfo","fixed_in":["0:3.29-7.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"libreswan-debugsource","fixed_in":["0:3.29-7.el8_1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.12","package":"libreswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.27"},{"fixed":"3.32-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"libreswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.27"},{"fixed":"3.32-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"libreswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.27"},{"fixed":"3.32-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"libreswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.27"},{"fixed":"3.32-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"libreswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.27"},{"fixed":"3.32-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"libreswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.27"},{"fixed":"3.32-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"libreswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.27"},{"fixed":"3.32-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"libreswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.27"},{"fixed":"3.32-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"libreswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.27"},{"fixed":"3.32-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"libreswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.27"},{"fixed":"3.32-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"libreswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.27"},{"fixed":"3.32-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"libreswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.27"},{"fixed":"3.32-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"libreswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.27"},{"fixed":"3.32-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libreswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.32-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libreswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.32-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"libreswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.27-6+deb10u1"}]}],"versions":["3.27-6"]},{"source":"osv","ecosystem":"Mageia:7","package":"libreswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.32-1.mga7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"libreswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.27-10.el8_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"libreswan-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.27-10.el8_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"libreswan-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.27-10.el8_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libreswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.29-7.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libreswan-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.29-7.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libreswan-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.29-7.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"libreswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.29-7.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"libreswan-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.29-7.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"libreswan-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.29-7.el8_1"}]}]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libreswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.20-7build1","3.21-2","3.22-1","3.22-2","3.22-3","3.22-4","3.23-1","3.23-4"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libreswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.29-2","3.29-2build1"]}],"products":[{"vendor":"libreswan","product":"libreswan"},{"vendor":"the libreswan project","product":"libreswan"},{"vendor":"the libreswan project (www.libreswan.org)","product":"libreswan"}],"references":[{"url":"https://libreswan.org/security/CVE-2020-1763/CVE-2020-1763.txt","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","fix","advisory","article","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1763","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1813329","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"https://github.com/libreswan/libreswan/commit/471a3e41a449d7c753bc4edbba4239501bb62ba8","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory","fix","report"]},{"url":"https://www.debian.org/security/2020/dsa-4684","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.gentoo.org/glsa/202007-21","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-379803.pdf","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://us-cert.cisa.gov/ics/advisories/icsa-21-040-04","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","US Government Resource","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-1763","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-wx69-vm3h-3cgv"},{"url":"https://security.alpinelinux.org/vuln/CVE-2020-1763","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-1763","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2020-0215.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=26613","tags":["report"]},{"url":"https://access.redhat.com/errata/RHSA-2020:2070","tags":["web","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:2069","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1814541","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2069.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-1763","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-1763","tags":["advisory","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2070.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:2071","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2071.json","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-1763","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2020-1763","description":"An out-of-bounds buffer read flaw was found in the pluto daemon of libreswan from versions 3.27 till 3.31 where, an unauthenticated attacker could use this flaw to crash libreswan by sending specially-crafted IKEv1 Informational Exchange packets. The daemon respawns after the crash.","status":"published","published":"2020-05-12T13:41:20Z","modified":"2024-08-04T06:46:30.902Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:35:56.213477Z"}],"euvd":[{"id":"EUVD-2020-12590","description":"An out-of-bounds buffer read flaw was found in the pluto daemon of libreswan from versions 3.27 till 3.31 where, an unauthenticated attacker could use this flaw to crash libreswan by sending specially-crafted IKEv1 Informational Exchange packets. The daemon respawns after the crash.","status":"published","published":"2020-05-12T13:41:20Z","modified":"2024-08-04T06:46:30Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T03:08:12.086746Z"}],"ghsa":[{"id":"GHSA-wx69-vm3h-3cgv","title":"An out-of-bounds buffer read flaw was found in the pluto daemon of libreswan from versions 3.27...","description":"An out-of-bounds buffer read flaw was found in the pluto daemon of libreswan from versions 3.27 till 3.31 where, an unauthenticated attacker could use this flaw to crash libreswan by sending specially-crafted IKEv1 Informational Exchange packets. The daemon respawns after the crash.","status":"published","published":"2022-05-24T17:17:41Z","modified":"2023-01-29T05:02:36Z","cwes":["CWE-125"],"updated_at":"2026-11-02T14:45:07.602262Z"}],"nvd":[{"id":"CVE-2020-1763","description":"An out-of-bounds buffer read flaw was found in the pluto daemon of libreswan from versions 3.27 till 3.31 where, an unauthenticated attacker could use this flaw to crash libreswan by sending specially-crafted IKEv1 Informational Exchange packets. The daemon respawns after the crash.","status":"published","published":"2020-05-12T14:15:12.58Z","modified":"2026-06-17T03:02:21.25Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:06:00.784809Z"}],"osv":[{"id":"ALPINE-CVE-2020-1763","description":"An out-of-bounds buffer read flaw was found in the pluto daemon of libreswan from versions 3.27 till 3.31 where, an unauthenticated attacker could use this flaw to crash libreswan by sending specially-crafted IKEv1 Informational Exchange packets. The daemon respawns after the crash.","status":"published","published":"2020-05-12T14:15:12.58Z","modified":"2026-11-03T06:32:24.479685317Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T07:17:57.723967Z"},{"id":"CVE-2020-1763","description":"An out-of-bounds buffer read flaw was found in the pluto daemon of libreswan from versions 3.27 till 3.31 where, an unauthenticated attacker could use this flaw to crash libreswan by sending specially-crafted IKEv1 Informational Exchange packets. The daemon respawns after the crash.","status":"published","published":"2020-05-12T14:15:12.58Z","modified":"2026-10-20T13:52:00.206325734Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:15.212689Z"},{"id":"DEBIAN-CVE-2020-1763","description":"An out-of-bounds buffer read flaw was found in the pluto daemon of libreswan from versions 3.27 till 3.31 where, an unauthenticated attacker could use this flaw to crash libreswan by sending specially-crafted IKEv1 Informational Exchange packets. The daemon respawns after the crash.","status":"published","published":"2020-05-12T14:15:12.58Z","modified":"2026-11-06T17:26:37.841929034Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-06T18:04:44.027546Z"},{"id":"RHSA-2020:2069","title":"Red Hat Security Advisory: libreswan security update","status":"published","published":"2024-09-16T04:06:28Z","modified":"2025-11-22T12:01:21Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.072948Z"},{"id":"RHSA-2020:2070","title":"Red Hat Security Advisory: libreswan security update","status":"published","published":"2024-09-16T04:06:36Z","modified":"2025-11-22T12:01:21Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.072948Z"},{"id":"RHSA-2020:2071","title":"Red Hat Security Advisory: libreswan security update","status":"published","published":"2024-09-16T04:06:43Z","modified":"2025-11-22T12:01:22Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.072948Z"},{"id":"UBUNTU-CVE-2020-1763","description":"An out-of-bounds buffer read flaw was found in the pluto daemon of libreswan from versions 3.27 till 3.31 where, an unauthenticated attacker could use this flaw to crash libreswan by sending specially-crafted IKEv1 Informational Exchange packets. The daemon respawns after the crash.","status":"published","published":"2020-05-12T14:15:00Z","modified":"2025-10-24T04:48:15Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:23.344108Z"},{"id":"DSA-4684-1","title":"libreswan - security update","status":"published","published":"2020-05-13T00:00:00Z","modified":"2026-03-09T02:09:51.59706Z","updated_at":"2026-11-02T15:46:17.19998Z"},{"id":"MGASA-2020-0215","title":"Updated libreswan packages fix security vulnerability","description":"Updated libreswan packages fix security vulnerability:\n\nAn out-of-bounds buffer read flaw was found in the pluto daemon of\nlibreswan. An unauthenticated attacker could use this flaw to crash\nlibreswan by sending specially-crafted IKEv1 Informational Exchange\npackets. The daemon respawns after the crash (CVE-2020-1763).\n","status":"published","published":"2020-05-15T15:48:04Z","modified":"2026-04-16T04:43:57.705088098Z","updated_at":"2026-11-02T15:49:41.151324Z"}]}}