Vulnerability Database

296,746

Total vulnerabilities in the database

CVE-2015-3204

libreswan 3.9 through 3.12 allows remote attackers to cause a denial of service (daemon restart) via an IKEv1 packet with (1) unassigned bits set in the IPSEC DOI value or (2) the next payload value set to ISAKMP_NEXT_SAK.

Published: Jul 1, 2015
Updated: Apr 13, 2023
CVE: CVE-2015-3204
Severity: Medium
Exploit:

CVSS v2:

Severity: Medium
Score: 5
AV:N/AC:L/Au:N/C:N/I:N/A:P

CWEs:

CWE-20

Affected Software
References

Software	From	Fixed in
libreswan / libreswan	3.10	3.10.x
libreswan / libreswan	3.12	3.12.x
libreswan / libreswan	3.11	3.11.x
libreswan / libreswan	3.9	3.9.x

http://rhn.redhat.com/errata/RHSA-2015-1154.html
http://www.securityfocus.com/bid/75392
https://libreswan.org/security/CVE-2015-3204/CVE-2015-3204.txt
https://security.gentoo.org/glsa/201603-13

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo