VULNERABILITY INTELLIGENCE

CVE-2015-3240

CVSS score4.3 MEDIUM
EPSS probability2.79%
CISA KEVNot currently listed
Published2015-11-09
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:N/C:N/I:N/A:P

Description

The pluto IKE daemon in libreswan before 3.15 and Openswan before 2.6.45, when built with NSS, allows remote attackers to cause a denial of service (assertion failure and daemon restart) via a zero DH g^x value in a KE payload in a IKE packet.

Primary references