CVE-2015-3204
Fixed in a distro release EPSS 3%
libreswan 3.9 through 3.12 allows remote attackers to cause a denial of service (daemon restart) via an IKEv1 packet with (1) unassigned bits set in the IPSEC DOI value or (2) the next payload value set to ISAKMP_NEXT_SAK.
Products: libreswan
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 7 | libreswan | 0:3.12-10.1.el7_1 |
| Red Hat Enterprise Linux 7 | libreswan | 0:3.12-10.1.ael7b_1 |
| Red Hat Enterprise Linux 7 | libreswan-debuginfo | 0:3.12-10.1.el7_1 |
| Red Hat Enterprise Linux 7 | libreswan-debuginfo | 0:3.12-10.1.ael7b_1 |