11 matches found
Linux Distros Unpatched Vulnerability : CVE-2016-5361
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - programs/pluto/ikev1.c in libreswan before 3.17 retransmits in initial-responder states, which allows remote attackers to cause a denial of service traffic...
RHEL 5 : openswan (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - IKEv1: IKEv1 protocol vulnerability in the authentication mode with pre-shared keys in the main mode of...
Huawei EulerOS: Security Advisory for libreswan (EulerOS-SA-2016-1078)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2016-5361
No description provided...
EulerOS 2.0 SP1 : libreswan (EulerOS-SA-2016-1078)
According to the version of the libreswan package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A traffic amplification flaw was found in the Internet Key Exchange version 1 IKEv1 protocol. A remote attacker could use a libreswan server with...
Scientific Linux Security Update : libreswan on SL7.x x86_64 (20161103)
Security Fixes : - A traffic amplification flaw was found in the Internet Key Exchange version 1 IKEv1 protocol. A remote attacker could use a libreswan server with IKEv1 enabled in a network traffic amplification denial of service attack against other hosts on the network by sending UDP packets...
RHEL 7 : libreswan (RHSA-2016:2603)
An update for libreswan is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
RedHat Update for libreswan RHSA-2016:2603-02
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2016-5361
programs/pluto/ikev1.c in libreswan before 3.17 retransmits in initial-responder states, which allows remote attackers to cause a denial of service traffic amplification via a spoofed UDP packet. NOTE: the original behavior complies with the IKEv1 protocol, but has a required security update from...
CVE-2016-5361
Libreswan vulnerable component: programs/pluto/ikev1.c in libreswan prior to 3.17. Root cause: IKEv1 initial-responder state retransmits can be abused by spoofed UDP packets to cause a denial-of-service (traffic amplification). Impact is DoS via network traffic amplification. Remediation: apply v...
CVE-2016-5361
programs/pluto/ikev1.c in libreswan before 3.17 retransmits in initial-responder states, which allows remote attackers to cause a denial of service traffic amplification via a spoofed UDP packet. NOTE: the original behavior complies with the IKEv1 protocol, but has a required security update from...