tocsin

Debian/libreswan: high 7.5

An invalidly formatted IKEv2 fragment causes the Libreswan pluto daemon to crash and restart. Continued exploitation would cause a denial of service. The function reassemble_v2_incoming_fragments() wo

Action: Upgrade libreswan to 5.2-2.5 or later.

Affected

introducedfixedlast affected
05.2-2.5-

Fixed versions

5.2-2.5

Sources

published · modified · JSON