CVE-2016-3071 Libreswan 3.16 might allow remote attackers to cause a denial of service (daemon restart) via an IKEv2 aes_xcbc transform.
HighCVSS 7.5
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Libreswan 3.16 might allow remote attackers to cause a denial of service (daemon restart) via an IKEv2 aes_xcbc transform.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| libreswan | = 3.16 | No fix listed |
| fedoraproject fedora | = 23 | No fix listed |
| fedoraproject fedora | = 24 | No fix listed |
References
- download.libreswan.org
- FEDORA-2016-711a04c964 vendor-advisory
- FEDORA-2016-680a5a8ead vendor-advisory
- 87295 vdb-entry
- libreswan.org vendor-advisory
- Debian Security Tracker CVE-2016-3071 vendor-advisory