CVE - CVE-2016-5361

CVE-ID
CVE-2016-5361	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
programs/pluto/ikev1.c in libreswan before 3.17 retransmits in initial-responder states, which allows remote attackers to cause a denial of service (traffic amplification) via a spoofed UDP packet. NOTE: the original behavior complies with the IKEv1 protocol, but has a required security update from the libreswan vendor; as of 2016-06-10, it is expected that several other IKEv1 implementations will have vendor-required security updates, with separate CVE IDs assigned to each.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
CONFIRM:https://github.com/libreswan/libreswan/commit/152d6d95632d8b9477c170f1de99bcd86d7fb1d6 MLIST:[oss-security] 20160610 Re: CVE Request: IKEv1 protocol is vulnerable to DoS amplification attack URL:http://www.openwall.com/lists/oss-security/2016/06/10/4 MLIST:[swan-dev] 20160313 Proposal: Do not retransmit IKEv1 reply for initial responder states URL:https://lists.libreswan.org/pipermail/swan-dev/2016-March/001394.html REDHAT:RHSA-2016:2603 URL:http://rhn.redhat.com/errata/RHSA-2016-2603.html
Assigning CNA
MITRE Corporation
Date Record Created
20160609	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20160609)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)