Lucene search
+L

7 matches found

Mageia
Mageia
•added 2022/01/25 12:13 p.m.•53 views

Updated libreswan packages fix security vulnerability

Libreswan 4.2 through 4.5 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted IKEv1 packet because pluto/ikev1.c wrongly expects that a state object exists. CVE-2022-23094...

7.5CVSS5.4AI score0.02544EPSS
SaveExploits1References4
Mend
Mend
•added 2022/01/15 1:37 a.m.•2 views

CVE-2022-23094

Libreswan 4.2 through 4.5 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted IKEv1 packet because pluto/ikev1.c wrongly expects that a state object exists. This is fixed in 4.6...

8.7CVSS0.02544EPSS
SaveExploits1References13
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/15 12:00 a.m.•5 views

CVE-2022-23094: NULL Pointer Dereference

Libreswan 4.2 through 4.5 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted IKEv1 packet because pluto/ikev1.c wrongly expects that a state object exists. This is fixed in 4.6...

7.5CVSS5.7AI score0.02544EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/01/11 12:00 a.m.•1 views

PT-2022-15840

Name of the Vulnerable Software and Affected Versions Libreswan versions 4.2 through 4.5 Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and daemon crash, via a crafted IKEv1 packet. This occurs because the pluto/ikev1.c file...

7.5CVSS0.02544EPSS
SaveExploits1References32
Mend
Mend
•added 2016/06/16 2:00 p.m.•2 views

CVE-2016-5361

programs/pluto/ikev1.c in libreswan before 3.17 retransmits in initial-responder states, which allows remote attackers to cause a denial of service traffic amplification via a spoofed UDP packet. NOTE: the original behavior complies with the IKEv1 protocol, but has a required security update from...

8.7CVSS0.02724EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/06/16 12:00 a.m.•6 views

CVE-2016-5361: Improper Input Validation

programs/pluto/ikev1.c in libreswan before 3.17 retransmits in initial-responder states, which allows remote attackers to cause a denial of service traffic amplification via a spoofed UDP packet. NOTE: the original behavior complies with the IKEv1 protocol, but has a required security update from...

7.5CVSS7.2AI score0.02724EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2016/06/16 12:00 a.m.•4 views

PT-2016-6390

Name of the Vulnerable Software and Affected Versions libreswan versions prior to 3.17 Description The issue allows remote attackers to cause a denial of service, specifically traffic amplification, via a spoofed UDP packet. This is due to the retransmission in initial-responder states. The...

7.5CVSS0.02724EPSS
SaveExploits0References7
Rows per page
Query Builder