Description
Libreswan 3.16 might allow remote attackers to cause a denial of service (daemon restart) via an IKEv2 aes_xcbc transform.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182130.html ↗
- http://www.securityfocus.com/bid/87295 ↗
- http://download.libreswan.org/CHANGES ↗
- https://libreswan.org/security/CVE-2016-3071/CVE-2016-3071.txt ↗
- http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182050.html ↗