CVE-2015-3204

EUVD-2015-3270
libreswan 3.9 through 3.12 allows remote attackers to cause a denial of service (daemon restart) via an IKEv1 packet with (1) unassigned bits set in the IPSEC DOI value or (2) the next payload value set to ISAKMP_NEXT_SAK.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:N/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 68%
Affected Products (NVD)
VendorProductVersion
libreswanlibreswan
3.9
libreswanlibreswan
3.10
libreswanlibreswan
3.11
libreswanlibreswan
3.12
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
libreswan
bookworm
4.10-2+deb12u1
fixed
bullseye
4.3-1+deb11u4
fixed
bullseye (security)
4.3-1+deb11u3
fixed
sid
4.14-1.1
fixed
trixie
4.14-1.1
fixed
Common Weakness Enumeration
References
http://rhn.redhat.com/errata/RHSA-2015-1154.html
http://www.securityfocus.com/bid/75392
https://libreswan.org/security/CVE-2015-3204/CVE-2015-3204.txt
https://security.gentoo.org/glsa/201603-13
http://rhn.redhat.com/errata/RHSA-2015-1154.html
http://www.securityfocus.com/bid/75392
https://libreswan.org/security/CVE-2015-3204/CVE-2015-3204.txt
https://security.gentoo.org/glsa/201603-13