Design/Logic Flaw

The ikev2parentinI1outR1 function in pluto/ikev2parent.c in libreswan before 3.7 allows remote attackers to cause a denial of service restart via an IKEv2 I1 notification without a KE payload...

CVE-2013-7294

The CVE-2013-7294 issue affects libreswan prior to 3.7, where the ikev2parent_inI1outR1 function in pluto/ikev2_parent.c can be abused by remote attackers through an IKEv2 I1 notification without a KE payload to cause a DoS (restart). Impact is a network-exposed denial of service; no exploitation...

CVE-2013-7294

The ikev2parentinI1outR1 function in pluto/ikev2parent.c in libreswan before 3.7 allows remote attackers to cause a denial of service restart via an IKEv2 I1 notification without a KE payload...

CVE-2013-7283

Race condition in the libreswan.spec files for Red Hat Enterprise Linux RHEL and Fedora packages in libreswan 3.6 has unspecified impact and attack vectors, involving the /var/tmp/libreswan-nss-pwd temporary file...

Race condition

Race condition in the libreswan.spec files for Red Hat Enterprise Linux RHEL and Fedora packages in libreswan 3.6 has unspecified impact and attack vectors, involving the /var/tmp/libreswan-nss-pwd temporary file...

CVE-2013-7283

Race condition in the libreswan.spec files for Red Hat Enterprise Linux RHEL and Fedora packages in libreswan 3.6 has unspecified impact and attack vectors, involving the /var/tmp/libreswan-nss-pwd temporary file...

CVE-2013-7283

CVE-2013-7283 describes a race condition in libreswan 3.6 affecting the libreswan.spec packaging for Red Hat Enterprise Linux (RHEL) and Fedora. The underlying issue involves the temporary file /var/tmp/libreswan-nss-pwd; impact and attack vectors are not detailed in the provided documents. The l...

CVE-2013-7283

Race condition in the libreswan.spec files for Red Hat Enterprise Linux RHEL and Fedora packages in libreswan 3.6 has unspecified impact and attack vectors, involving the /var/tmp/libreswan-nss-pwd temporary file...

CVE-2013-4564

Libreswan 3.6 allows remote attackers to cause a denial of service crash via a small length value and 1 no version or 2 an invalid major number in an IKE packet...

Code injection

Libreswan 3.6 allows remote attackers to cause a denial of service crash via a small length value and 1 no version or 2 an invalid major number in an IKE packet...

CVE-2013-4564

Libreswan 3.6 allows remote attackers to cause a denial of service crash via a small length value and 1 no version or 2 an invalid major number in an IKE packet...

CVE-2013-4564

CVE-2013-4564 affects Libreswan (IPsec/IKE) up to version 3.6. The issue is in IKEv2 processing (ikev2parent_inI1outR1) that can crash a remote peer when handling a small KE payload with either no version or an invalid major number, leading to denial of service. Public sources in connected docs c...

CVE-2013-4564

Libreswan 3.6 allows remote attackers to cause a denial of service crash via a small length value and 1 no version or 2 an invalid major number in an IKE packet...

libreswan多个漏洞

CVE ID：CVE-2013-4564 Libreswan是一款类似OpenSwan的IPsec实现。 1处理"processpacket方法pluto/demux.c中IKE数据包时的错误，导致通过特制的IKE数据包造成libreswan重新启动。 2处理"ikev2parentinI1outR1"函数（pluto/ikev2parent.c中IKE通告报文时的错误，导致利用特制的IKE引起libreswan重新启动。 3为RHEL处理libreswan.spec文件时应用程序不安全创建/var/tmp/libreswan-nss-pwd文件，可被利用来操纵某些数据。 0...

[SECURITY] Fedora 20 Update: libreswan-3.7-1.fc20

Libreswan is a free implementation of IPsec & IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks. Everything passing through the...

[SECURITY] Fedora 19 Update: libreswan-3.7-1.fc19

Libreswan is a free implementation of IPsec & IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks. Everything passing through the...

Fedora Update for libreswan FEDORA-2013-23299

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for libreswan FEDORA-2013-23315

Check for the Version of libreswan OpenVAS Vulnerability Test Fedora Update for libreswan FEDORA-2013-23315 Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Fedora Update for libreswan FEDORA-2013-23299

Check for the Version of libreswan OpenVAS Vulnerability Test Fedora Update for libreswan FEDORA-2013-23299 Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Fedora 18 : libreswan-3.7-1.fc18 (2013-23299)

Security fix for CVE-2013-4564, extended AES-GCM and AES-CCM Improved Cisco interop, IKEv2 improvements, bugfixes Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it...