1082 matches found
Null pointer dereference
libreswan before 3.18 allows remote attackers to cause a denial of service NULL pointer dereference and pluto daemon restart...
CVE-2016-5391
libreswan before 3.18 allows remote attackers to cause a denial of service NULL pointer dereference and pluto daemon restart...
CVE-2016-5391
libreswan before 3.18 allows remote attackers to cause a denial of service NULL pointer dereference and pluto daemon restart...
CVE-2016-5391
CVE-2016-5391 : Libreswan before 3.18 allows a remote attacker to cause a denial of service via a NULL pointer dereference, restarting the pluto daemon. The issue is triggered by specially crafted IKE packets, and affects versions prior to 3.18. Mitigation is to upgrade to Libreswan 3.18 or apply...
CVE-2016-5391
libreswan before 3.18 allows remote attackers to cause a denial of service NULL pointer dereference and pluto daemon restart...
PT-2017-8714 · Libreswan · Libreswan
Name of the Vulnerable Software and Affected Versions: libreswan versions prior to 3.18 Description: The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and a restart of the pluto daemon. Recommendations: For versions prior to 3.18, update to...
EulerOS 2.0 SP1 : libreswan (EulerOS-SA-2016-1078)
According to the version of the libreswan package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A traffic amplification flaw was found in the Internet Key Exchange version 1 IKEv1 protocol. A remote attacker could use a libreswan server with...
Scientific Linux Security Update : libreswan on SL7.x x86_64 (20161103)
Security Fixes : - A traffic amplification flaw was found in the Internet Key Exchange version 1 IKEv1 protocol. A remote attacker could use a libreswan server with IKEv1 enabled in a network traffic amplification denial of service attack against other hosts on the network by sending UDP packets...
CentOS 7 : libreswan (CESA-2016:2603)
An update for libreswan is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
libreswan security update
CentOS Errata and Security Advisory CESA-2016:2603 An update for libreswan is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severit...
Oracle Linux 7 : libreswan (ELSA-2016-2603)
The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2016-2603 advisory. - Resolves: rhbz1344567 CVE-2016-5361 libreswan: IKEv1 protocol is vulnerable to DoS amplification attack Tenable has extracted the preceding description block...
libreswan security and bug fix update
3.15-8.0.1 - add libreswan-oracle.patch to detect Oracle Linux distro 3.15-8 - Resolves: rhbz1361721 libreswan pluto segfault UPDATED - Resolves: rhbz1276524 USGv6 IKEv2.EN.R.1.1.3.2 case failed due to response to bad INFORMATIONAL request UPDATED - Resolves: rhbz1309764 ipsec barf additional man...
RHEL 7 : libreswan (RHSA-2016:2603)
An update for libreswan is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
RedHat Update for libreswan RHSA-2016:2603-02
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Moderate: Red Hat Security Advisory: libreswan security and bug fix update
An update for libreswan is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
IKEv1 protocol is vulnerable to DoS amplification attack
A traffic amplification flaw was found in the Internet Key Exchange version 1 IKEv1 protocol. A remote attacker could use a libreswan server with IKEv1 enabled in a network traffic amplification denial of service attack against other hosts on the network by sending UDP packets with a spoofed sour...
CVE-2016-5391
libreswan before 3.18 allows remote attackers to cause a denial of service NULL pointer dereference and pluto daemon restart...
Fedora Update for libreswan FEDORA-2016-d46685629d
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 23 : libreswan (2016-d46685629d)
Updated to 3.18 for CVE-2016-5391 rhbz1361164 and VTI support Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...
[SECURITY] Fedora 23 Update: libreswan-3.18-1.fc23
Libreswan is a free implementation of IPsec & IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks. Everything passing through the...