CVE-2015-3240

概要

参考情報

• rhn.redhat.com/errata/RHSA-2015-1979.html
• oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
• securityfocus.com/bid/77536
• securitytracker.com/id/1033418
• libreswan.org/security/CVE-2015-3240/CVE-2015-3240.txt · Vendor Advisory
• lists.openswan.org/pipermail/users/2015-August/023401.html · Vendor Advisory
• security.gentoo.org/glsa/201603-13

libreswan のその他の脆弱性

• CVE-2026-50722中 5.9Libreswan, via the function RSA_authenticate_hash_signature_pkcs1_1_5_rsa(), did not correctly verify the DER encoding of the ASN.1 digest w…
• CVE-2026-50721中 5.9Libreswan, via the function RSA_authenticate_hash_signature_raw_rsa(), did not correctly verify the length of the authentication hash when t…
• CVE-2026-12413高 7.5An invalidly formatted IKEv2 fragment causes the Libreswan pluto daemon to crash and restart. Continued exploitation would cause a denial of…
• CVE-2024-3652中 6.5The Libreswan Project was notified of an issue causing libreswan to restart when using IKEv1 without specifying an esp= line. When the peer …
• CVE-2023-38712中 6.5An issue was discovered in Libreswan 3.x and 4.x before 4.12. When an IKEv1 ISAKMP SA Informational Exchange packet contains a Delete/Notify…