Описание
Libreswan 3.6 allows remote attackers to cause a denial of service (crash) via a small length value and (1) no version or (2) an invalid major number in an IKE packet.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 7 | libreswan | Not affected |
Показывать по
10
Дополнительная информация
Статус:
Moderate
https://bugzilla.redhat.com/show_bug.cgi?id=1031830libreswan: DoS due to how mangled IKE packets are handled
4.3 Medium
CVSS2
Связанные уязвимости
nvd
больше 12 лет назад
Libreswan 3.6 allows remote attackers to cause a denial of service (crash) via a small length value and (1) no version or (2) an invalid major number in an IKE packet.
debian
больше 12 лет назад
Libreswan 3.6 allows remote attackers to cause a denial of service (cr ...
github
около 4 лет назад
Libreswan 3.6 allows remote attackers to cause a denial of service (crash) via a small length value and (1) no version or (2) an invalid major number in an IKE packet.
4.3 Medium
CVSS2