Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2015-3240HistoryNov 09, 2015 - 4:59 p.m.
CVE-2015-3240
2015-11-0916:59:01
Debian Security Bug Tracker
security-tracker.debian.org
10
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.045 Low
EPSS
Percentile
92.6%
The pluto IKE daemon in libreswan before 3.15 and Openswan before 2.6.45, when built with NSS, allows remote attackers to cause a denial of service (assertion failure and daemon restart) via a zero DH g^x value in a KE payload in a IKE packet.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | libreswan | < 4.10-2+deb12u1 | libreswan_4.10-2+deb12u1_all.deb |
| Debian | 11 | all | libreswan | < 4.3-1+deb11u4 | libreswan_4.3-1+deb11u4_all.deb |
| Debian | 999 | all | libreswan | < 4.14-1 | libreswan_4.14-1_all.deb |
| Debian | 13 | all | libreswan | < 4.14-1 | libreswan_4.14-1_all.deb |
Related
cve
cve
CVE-2015-3240
2015-11-09 16:59:01
openvas
openvas
CentOS Update for libreswan CESA-2015:1979 centos7
2015-11-05 00:00:00
RedHat Update for libreswan RHSA-2015:1979-01
2015-11-05 00:00:00
Oracle: Security Advisory (ELSA-2015-1979)
2015-11-08 00:00:00
nessus
nessus
CentOS 7 : libreswan (CESA-2015:1979)
2015-11-04 00:00:00
Scientific Linux Security Update : libreswan on SL7.x x86_64 (20151104)
2015-11-05 00:00:00
RHEL 7 : libreswan (RHSA-2015:1979)
2015-11-05 00:00:00
cvelist
cvelist
CVE-2015-3240
2015-11-09 16:00:00
ubuntucve
ubuntucve
CVE-2015-3240
2015-11-09 00:00:00
oraclelinux
oraclelinux
libreswan security and enhancement update
2015-11-03 00:00:00
centos
centos
libreswan security update
2015-11-03 21:50:51
redhat
redhat
(RHSA-2015:1979) Moderate: libreswan security and enhancement update
2015-11-03 19:22:20
prion
prion
Code injection
2015-11-09 16:59:00
nvd
nvd
CVE-2015-3240
2015-11-09 16:59:01
gentoo
gentoo
Libreswan: Multiple Vulnerabilities
2016-03-12 00:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.045 Low
EPSS
Percentile
92.6%
Related for DEBIANCVE:CVE-2015-3240