CVE-2015-3240
Fixed in a distro release EPSS 3%
The pluto IKE daemon in libreswan before 3.15 and Openswan before 2.6.45, when built with NSS, allows remote attackers to cause a denial of service (assertion failure and daemon restart) via a zero DH g^x value in a KE payload in a IKE packet.
Products: libreswan
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 7 | libreswan | 0:3.15-5.el7_1 |
| Red Hat Enterprise Linux 7 | libreswan | 0:3.15-5.ael7b_1 |
| Red Hat Enterprise Linux 7 | libreswan-debuginfo | 0:3.15-5.el7_1 |
| Red Hat Enterprise Linux 7 | libreswan-debuginfo | 0:3.15-5.ael7b_1 |