CVE-2013-7294

The ikev2parent_inI1outR1 function in pluto/ikev2_parent.c in libreswan before 3.7 allows remote attackers to cause a denial of service (restart) via an IKEv2 I1 notification without a KE payload.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:N/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 74%
VendorProductVersion
libreswanlibreswan
𝑥
≤ 3.6
libreswanlibreswan
3.0
libreswanlibreswan
3.1
libreswanlibreswan
3.2
libreswanlibreswan
3.3
libreswanlibreswan
3.4
libreswanlibreswan
3.5
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://secunia.com/advisories/56276
http://secunia.com/advisories/56915
http://www.osvdb.org/101573
https://github.com/libreswan/libreswan/commit/2899351224fe2940aec37d7656e1e392c0fe07f0
https://lists.libreswan.org/pipermail/swan-announce/2013/000007.html
http://secunia.com/advisories/56276
http://secunia.com/advisories/56915
http://www.osvdb.org/101573
https://github.com/libreswan/libreswan/commit/2899351224fe2940aec37d7656e1e392c0fe07f0
https://lists.libreswan.org/pipermail/swan-announce/2013/000007.html