SUSE CVE-2016-5361

programs/pluto/ikev1.c in libreswan before 3.17 retransmits in initial-responder states, which allows remote attackers to cause a denial of service traffic amplification via a spoofed UDP packet. NOTE: the original behavior complies with the IKEv1 protocol, but has a required security update from...

CVE-2016-5361

Libreswan vulnerable component: programs/pluto/ikev1.c in libreswan prior to 3.17. Root cause: IKEv1 initial-responder state retransmits can be abused by spoofed UDP packets to cause a denial-of-service (traffic amplification). Impact is DoS via network traffic amplification. Remediation: apply v...