VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 1, 2015· Updated May 6, 2026

CVE-2015-3204

CVE-2015-3204

Description

libreswan 3.9 through 3.12 allows remote attackers to cause a denial of service (daemon restart) via an IKEv1 packet with (1) unassigned bits set in the IPSEC DOI value or (2) the next payload value set to ISAKMP_NEXT_SAK.

Affected products

4
  • Libreswan/Libreswan4 versions
    cpe:2.3:a:libreswan:libreswan:3.9:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:libreswan:libreswan:3.9:*:*:*:*:*:*:*
    • cpe:2.3:a:libreswan:libreswan:3.10:*:*:*:*:*:*:*
    • cpe:2.3:a:libreswan:libreswan:3.11:*:*:*:*:*:*:*
    • cpe:2.3:a:libreswan:libreswan:3.12:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

4

News mentions

0

No linked articles in our index yet.