CVE-2015-3204 Denial of service in n/a

Medium 5.0 Published 1 Jul 2015 Updated 6 Aug 2024

Remote attackers can cause a denial of service by sending malformed IKEv1 packets to the libreswan daemon, requiring an upgrade to mitigate.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2015-3204?

CVE-2015-3204 is a medium-severity denial of service vulnerability in n/a, published on 1 Jul 2015. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

libreswan 3.9 through 3.12 allows remote attackers to cause a denial of service (daemon restart) via an IKEv1 packet with (1) unassigned bits set in the IPSEC DOI value or (2) the next payload value set to ISAKMP_NEXT_SAK.

Weakness: CWE-20

Which versions are affected by CVE-2015-3204?

It affects 1 product.

Linux distribution packages (6)

`libreswan` Red Hat:enterprise_linux:7::client	All versions	`0:3.12-10.1.el7_1`
`libreswan-debuginfo` Red Hat:enterprise_linux:7::client	All versions	`0:3.12-10.1.el7_1`
`libreswan` Red Hat:enterprise_linux:7::server	All versions	`0:3.12-10.1.ael7b_1`
`libreswan-debuginfo` Red Hat:enterprise_linux:7::server	All versions	`0:3.12-10.1.ael7b_1`
`libreswan` Red Hat:enterprise_linux:7::workstation	All versions	`0:3.12-10.1.el7_1`
`libreswan-debuginfo` Red Hat:enterprise_linux:7::workstation	All versions	`0:3.12-10.1.el7_1`

Products include Libreswan Libreswan.

How do I fix CVE-2015-3204?

Upgrade to a fixed version.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2015-3204 being exploited?

There is no known exploitation of CVE-2015-3204 in the wild and no public exploit code.

Sources

Also known as GHSA-52gh-6xp3-9wpf, RHSA-2015:1154.