Improper input validation in Libreswan
CVE-2016-5361
programs/pluto/ikev1.c in libreswan before 3.17 retransmits in initial-responder states, which allows remote attackers to cause a denial of service (traffic amplification) via a spoofed UDP packet. NOTE: the original behavior complies with the IKEv1 protocol, but has a required security update from the libreswan vendor; as of 2016-06-10, it is expected that several other IKEv1 implementations will have vendor-required security updates, with separate CVE IDs assigned to each.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
EPSS exploit prediction
EPSS: 0.027 (85.4th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 85th percentile — 85.4% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.027 · newest: 0.027 · change: 0.000
Affected products
Weakness classification (CWE)
References
- lists.libreswan.org/pipermail/swan-dev/2016-March/001394.html (mailing-list)
- rhn.redhat.com/errata/RHSA-2016-2603.html (vendor-advisory)
- github.com/libreswan/libreswan/commit/152d6d95632d8b9477c170f1de99bcd86d7fb1d6 (Patch, Vendor Advisory)
- www.openwall.com/lists/oss-security/2016/06/10/4 (mailing-list)
Frequently asked questions
- What is CVE-2016-5361?
- CVE-2016-5361 is a high-severity vulnerability in Libreswan, classified under Improper Input Validation. CVSS score: 7.5/10. Published 2016-06-16.
- How severe is CVE-2016-5361?
- High severity. CVSS v3 base score is 7.5 out of 10.