Red Hat Security Advisory

RHSA-2016:2603

libreswan security and bug fix update

Released 2016-11-03 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) libreswan-3.15-8.el7
Red Hat Enterprise Linux Server (v. 7) libreswan-3.15-8.el7
Red Hat Enterprise Linux Workstation (v. 7) libreswan-3.15-8.el7

Fixes 1 record

TI-2016-04652 CVE-2016-5361 · GHSA-pvgh-6wjg-x887

programs/pluto/ikev1.c in libreswan before 3.17 retransmits in initial-responder states…

LOW 38

programs/pluto/ikev1.c in libreswan before 3.17 retransmits in initial-responder states, which allows remote attackers to cause a denial of service (traffic amplification) via a spoofed UDP packet.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02724 Published 2016-06-16 Partial fix CWE-20