CVE-2022-23094 in Libreswan
Сводка
по VulDB • 28.08.2026
Libreswan versions 4.2 through 4.5 allow remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted IKEv1 packet because pluto/ikev1.c wrongly expects that a state object exists. This is fixed in version 4.6.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.