CVE-2015-3991
First published: Tue May 19 2015(Updated: )
A flaw was found in the strongSwan payload handling code. This flaw can be triggered by an IKEv1 or IKEv2 message that contains payloads that are only defined for the respective other IKE version. For instance, sending an IKEv1 Main Mode message containing a payload with type 41 (IKEv2 Notify) will crash the daemon or, potentially allow for remote code execution, when a short summary of the contents of the message is logged ("parsed ID_PROT request 0 [ ... ]").
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/strongswan | <5.3.1 | 5.3.1 |
| Strongswan Strongswan | =5.2.2 | |
| Strongswan Strongswan | =5.3.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=1027039
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=1027039&action=edit
- https://www.strongswan.org/blog/2015/06/01/strongswan-vulnerability-%28cve-2015-3991%29.html
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1228819
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1228820
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1228821
- https://bugzilla.redhat.com/show_bug.cgi?id=1222815
- http://lists.fedoraproject.org/pipermail/package-announce/2015-August/164276.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-August/164278.html
- http://www.securityfocus.com/bid/76861
- https://www.strongswan.org/blog/2015/06/01/strongswan-vulnerability-(cve-2015-3991).html
- collector/nvd-index
- agent/type
- agent/first-publish-date
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/references
- agent/last-modified-date
- agent/author
- agent/severity
- agent/description
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2015-3991
- agent/software-canonical-lookup
- agent/event
- agent/tags
- vendor/strongswan
- canonical/strongswan strongswan
- version/strongswan strongswan/5.2.2
- version/strongswan strongswan/5.3.0
- package-manager/redhat