libreswan-3.15-8.0.1.el7.AXS7
エラータID: AXSA:2016-1148:01
Release date:
Monday, December 5, 2016 - 12:10
Subject:
libreswan-3.15-8.0.1.el7.AXS7
Affected Channels:
Asianux Server 7 for x86_64
Severity:
Moderate
Description:
Libreswan is a free implementation of IPsec
Solution:
Update packages.
CVEs:
CVE-2016-5361
programs/pluto/ikev1.c in libreswan before 3.17 retransmits in initial-responder states, which allows remote attackers to cause a denial of service (traffic amplification) via a spoofed UDP packet. NOTE: the original behavior complies with the IKEv1 protocol, but has a required security update from the libreswan vendor; as of 2016-06-10, it is expected that several other IKEv1 implementations will have vendor-required security updates, with separate CVE IDs assigned to each.
programs/pluto/ikev1.c in libreswan before 3.17 retransmits in initial-responder states, which allows remote attackers to cause a denial of service (traffic amplification) via a spoofed UDP packet. NOTE: the original behavior complies with the IKEv1 protocol, but has a required security update from the libreswan vendor; as of 2016-06-10, it is expected that several other IKEv1 implementations will have vendor-required security updates, with separate CVE IDs assigned to each.
Additional Info:
N/A
Download:
SRPMS
- libreswan-3.15-8.0.1.el7.AXS7.src.rpm
MD5: 9fe9b058c82cefd96f96c8f213a78a35
SHA-256: 0f7e158ede0996e085749b1c2a64ae4205a52791e891399740bdf6330c3c79b2
Size: 17.82 MB
Asianux Server 7 for x86_64
- libreswan-3.15-8.0.1.el7.AXS7.x86_64.rpm
MD5: 4e073715688bb0369d5d7c1e27d41119
SHA-256: 516c07e313373972bb5f0faeb94a6cc48f3e836bc8f7235fec17f8123b7aef7c
Size: 1.24 MB
日本語