CVE-2015-3204

2015-07-0114:59:08

CWE-20

redhat

web.nvd.nist.gov

cve

libreswan

denial of service

remote attackers

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.4

Confidence

Low

EPSS

0.011

Percentile

84.3%

JSON

libreswan 3.9 through 3.12 allows remote attackers to cause a denial of service (daemon restart) via an IKEv1 packet with (1) unassigned bits set in the IPSEC DOI value or (2) the next payload value set to ISAKMP_NEXT_SAK.

Affected configurations

Nvd

Node

libreswanlibreswanMatch3.9

libreswanlibreswanMatch3.10

libreswanlibreswanMatch3.11

libreswanlibreswanMatch3.12

VendorProductVersionCPE
libreswanlibreswan3.9cpe:2.3:a:libreswan:libreswan:3.9:*:*:*:*:*:*:*
libreswanlibreswan3.10cpe:2.3:a:libreswan:libreswan:3.10:*:*:*:*:*:*:*
libreswanlibreswan3.11cpe:2.3:a:libreswan:libreswan:3.11:*:*:*:*:*:*:*
libreswanlibreswan3.12cpe:2.3:a:libreswan:libreswan:3.12:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
libreswan	libreswan	3.9	cpe:2.3:a:libreswan:libreswan:3.9:::::::*
libreswan	libreswan	3.10	cpe:2.3:a:libreswan:libreswan:3.10:::::::*
libreswan	libreswan	3.11	cpe:2.3:a:libreswan:libreswan:3.11:::::::*
libreswan	libreswan	3.12	cpe:2.3:a:libreswan:libreswan:3.12:::::::*