1159 matches found
Null pointer dereference
Libreswan 3.7 and earlier allows remote attackers to cause a denial of service NULL pointer dereference and IKE daemon restart via IKEv2 packets that lack expected payloads...
CVE-2013-6467
Libreswan 3.7 and earlier allows remote attackers to cause a denial of service NULL pointer dereference and IKE daemon restart via IKEv2 packets that lack expected payloads...
CVE-2013-6467
Libreswan 3.7 and earlier allows remote attackers to cause a denial of service NULL pointer dereference and IKE daemon restart via IKEv2 packets that lack expected payloads...
CVE-2013-6467
CVE-2013-6467 affects Libreswan 3.7 and earlier, where IKEv2 payload handling could cause a NULL pointer dereference and IKE daemon restart, leading to a denial of service. The vulnerability is network-exploit via IKEv2 packets with missing payloads, with CVSSv2 base score 5.0 (NETWORK, LOW compl...
CVE-2013-6467: Undefined Security Weakness
Libreswan 3.7 and earlier allows remote attackers to cause a denial of service NULL pointer dereference and IKE daemon restart via IKEv2 packets that lack expected payloads...
Libreswan 'ikev2parent_inI1outR1()'函数远程拒绝服务漏洞
BUGTRAQ ID: 64984 CVECAN ID: CVE-2013-7294 Libreswan是Linux平台上的IPsec实现，支持很多IPsec扩展，包括IKEv2, X.509 Digital Certificates, NAT Traversal等。 Libreswan 3.7之前版本，programs/pluto/ikev2parent.c内的函数 ikev2parentinI1outR1 存在安全漏洞，可导致远程拒绝服务。此漏洞源于处理KE负载时，IKEv2 I1通知失败。 0 libreswan libreswan 3.6 厂商补丁： libreswan...
CVE-2013-7294
The ikev2parentinI1outR1 function in pluto/ikev2parent.c in libreswan before 3.7 allows remote attackers to cause a denial of service restart via an IKEv2 I1 notification without a KE payload...
Design/Logic Flaw
The ikev2parentinI1outR1 function in pluto/ikev2parent.c in libreswan before 3.7 allows remote attackers to cause a denial of service restart via an IKEv2 I1 notification without a KE payload...
CVE-2013-7294
The ikev2parentinI1outR1 function in pluto/ikev2parent.c in libreswan before 3.7 allows remote attackers to cause a denial of service restart via an IKEv2 I1 notification without a KE payload...
CVE-2013-7294
The CVE-2013-7294 issue affects libreswan prior to 3.7, where the ikev2parent_inI1outR1 function in pluto/ikev2_parent.c can be abused by remote attackers through an IKEv2 I1 notification without a KE payload to cause a DoS (restart). Impact is a network-exposed denial of service; no exploitation...
CVE-2013-7294: Improper Input Validation
The ikev2parentinI1outR1 function in pluto/ikev2parent.c in libreswan before 3.7 allows remote attackers to cause a denial of service restart via an IKEv2 I1 notification without a KE payload...
CVE-2013-7283
Race condition in the libreswan.spec files for Red Hat Enterprise Linux RHEL and Fedora packages in libreswan 3.6 has unspecified impact and attack vectors, involving the /var/tmp/libreswan-nss-pwd temporary file...
Race condition
Race condition in the libreswan.spec files for Red Hat Enterprise Linux RHEL and Fedora packages in libreswan 3.6 has unspecified impact and attack vectors, involving the /var/tmp/libreswan-nss-pwd temporary file...
CVE-2013-7283
Race condition in the libreswan.spec files for Red Hat Enterprise Linux RHEL and Fedora packages in libreswan 3.6 has unspecified impact and attack vectors, involving the /var/tmp/libreswan-nss-pwd temporary file...
CVE-2013-7283
CVE-2013-7283 describes a race condition in libreswan 3.6 affecting the libreswan.spec packaging for Red Hat Enterprise Linux (RHEL) and Fedora. The underlying issue involves the temporary file /var/tmp/libreswan-nss-pwd; impact and attack vectors are not detailed in the provided documents. The l...
CVE-2013-7283
Race condition in the libreswan.spec files for Red Hat Enterprise Linux RHEL and Fedora packages in libreswan 3.6 has unspecified impact and attack vectors, involving the /var/tmp/libreswan-nss-pwd temporary file...
CVE-2013-7283: Concurrent Execution using Shared Resource with Improper Synchronization
Race condition in the libreswan.spec files for Red Hat Enterprise Linux RHEL and Fedora packages in libreswan 3.6 has unspecified impact and attack vectors, involving the /var/tmp/libreswan-nss-pwd temporary file...
CVE-2013-4564
Libreswan 3.6 allows remote attackers to cause a denial of service crash via a small length value and 1 no version or 2 an invalid major number in an IKE packet...