CVE-2015-3204 libreswan 3.9 through 3.12 allows remote attackers to cause a denial of service (daemon restart) via an IKEv1 packet with (1) unassigned bits set in the IPSEC DOI value or (2) the next payload value s...
MediumCVSS 5.0
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
libreswan 3.9 through 3.12 allows remote attackers to cause a denial of service (daemon restart) via an IKEv1 packet with (1) unassigned bits set in the IPSEC DOI value or (2) the next payload value set to ISAKMP_NEXT_SAK.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| libreswan | = 3.9 | No fix listed |
| libreswan | = 3.10 | No fix listed |
| libreswan | = 3.11 | No fix listed |
| libreswan | = 3.12 | No fix listed |
References
- RHSA-2015:1154 vendor-advisory
- 75392 vdb-entry
- libreswan.org vendor-advisory
- GLSA-201603-13 vendor-advisory
- Debian Security Tracker CVE-2015-3204 vendor-advisory