NVD

Id
25130  
Name
CVE-2015-3240  
Description
The pluto IKE daemon in libreswan before 3.15 and Openswan before 2.6.45, when built with NSS, allows remote attackers to cause a denial of service (assertion failure and daemon restart) via a zero DH g^x value in a KE payload in a IKE packet.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2015-11-09  
Modified Date
2016-12-02  
Seq
2015-3240  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
132907 25130 CVE-2015-3240 RHSA-2015:1979  View
132908 25130 CVE-2015-3240 http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html  View
132909 25130 CVE-2015-3240 77536  View
132910 25130 CVE-2015-3240 1033418  View
132911 25130 CVE-2015-3240 https://libreswan.org/security/CVE-2015-3240/CVE-2015-3240.txt  View
132912 25130 CVE-2015-3240 [Openswan Users] 20150827 Openswan 2.6.45 released  View
132913 25130 CVE-2015-3240 GLSA-201603-13  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
10497 JVNDB-2015-005817 Libreswan および Openswan の pluto IKE デーモンにおけるサービス運用妨害 (DoS) の脆弱性 Libreswan および Openswan の pluto IKE デーモンには、NSS でビルドされる場合、サービス運用妨害 (表明違反およびデーモンの再起動) 状態にされる脆弱性が存在します。 CVE-2015-3240 80465 CVE-2015-3240 25130 4.3 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-005817.html 2015-08-27 2015-11-11 View