libreswan 3.9 through 3.12 allows remote attackers to cause a denial of service (daemon restart) via an IKEv1 packet with (1) unassigned bits set in the IPSEC DOI value or (2) the next payload value set to ISAKMP_NEXT_SAK.
References
Configurations
Configuration 1 (hide)
|
History
13 Feb 2023, 00:48
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
Summary | libreswan 3.9 through 3.12 allows remote attackers to cause a denial of service (daemon restart) via an IKEv1 packet with (1) unassigned bits set in the IPSEC DOI value or (2) the next payload value set to ISAKMP_NEXT_SAK. |
02 Feb 2023, 20:20
Type | Values Removed | Values Added |
---|---|---|
Summary | A flaw was discovered in the way Libreswan's IKE daemon processed certain IKEv1 payloads. A remote attacker could send specially crafted IKEv1 payloads that, when processed, would lead to a denial of service (daemon crash). | |
References |
|
Information
Published : 2015-07-01 14:59
Updated : 2023-12-10 11:46
NVD link : CVE-2015-3204
Mitre link : CVE-2015-3204
CVE.ORG link : CVE-2015-3204
JSON object : View
Products Affected
libreswan
- libreswan
CWE
CWE-20
Improper Input Validation