libreswan: denial of service
| Package(s): | libreswan |
CVE #(s): | CVE-2016-3071
|
| Created: | April 13, 2016 |
Updated: | April 19, 2016 |
| Description: |
From the Libreswan advisory:
The Libreswan Project found a bug in the default proposal set for IKEv2.
This code, introduced in version 3.16, includes the AES_XCBC integrity
algorithm. It wrongly assumes that the NSS cryptographic library supports
this algorithm. As a result, the IKE daemon crashes and restarts when
the aes_xcbc transform is selected. No remote code execution is possible. |
| Alerts: |
|
