Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.

The Libreswan Project was informed of a Null Pointer Dereference bug in the EAP handling code for authentication that can result in a denial of service against the libreswan pluto daemon. 

As a result of inconsistency within the IKEv2 state machine code, a bug can be triggered by any IKEv2 connection, even if EAP is not configured at all. The bug results in a crash and restart. No remote code execution is possible. The error is caused by a fall-through error where it incorrectly dereferences ike->sa.st_eap which is NULL.

An malicious IKE_AUTH packet can trigger this bug, meaning the peer need not be authenticated. Continued attempts to use IKEv2 with such malicious payloads can cause a denial of service. No remote code execution is possible.

Vulnerable versions : 4.7 - 5.4
Not vulnerable      : 5.3.3, 5.4.1