CVE-2016-5361 programs/pluto/ikev1.c in libreswan before 3.17 retransmits in initial-responder states, which allows remote attackers to cause a denial of service (traffic amplification) via a spoofed UDP packet. NO...
HighCVSS 7.5
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
programs/pluto/ikev1.c in libreswan before 3.17 retransmits in initial-responder states, which allows remote attackers to cause a denial of service (traffic amplification) via a spoofed UDP packet. NOTE: the original behavior complies with the IKEv1 protocol, but has a required security update from the libreswan vendor; as of 2016-06-10, it is expected that several other IKEv1 implementations will have vendor-required security updates, with separate CVE IDs assigned to each.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| libreswan | <= 3.16 | No fix listed |
References
- RHSA-2016:2603 vendor-advisory
- [oss-security] 20160610 Re: CVE Request: IKEv1 protocol is vulnerable to DoS amplification attack mailing-list
- github.com patch vendor-advisory
- [swan-dev] 20160313 Proposal: Do not retransmit IKEv1 reply for initial responder states mailing-list
- Debian Security Tracker CVE-2016-5361 vendor-advisory