Red Hat Security Advisory

RHSA-2015:1979

libreswan security and enhancement update

Released 2015-11-04 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) libreswan-3.15-5.el7_1
Red Hat Enterprise Linux Server (v. 7) libreswan-3.15-5.ael7b_1, libreswan-3.15-5.el7_1
Red Hat Enterprise Linux Workstation (v. 7) libreswan-3.15-5.el7_1

Fixes 1 record

TI-2015-02869 CVE-2015-3240 · GHSA-m56r-f6p2-qgw5

The pluto IKE daemon in libreswan before 3.15 and Openswan before 2.6.45, when built with…

LOW 25

The pluto IKE daemon in libreswan before 3.15 and Openswan before 2.6.45, when built with NSS, allows remote attackers to cause a denial of service (assertion failure and daemon restart) via a zero DH g^x value in a KE p…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02788 Published 2015-11-09 Partial fix CWE-189