Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
programs/pluto/ikev1.c in libreswan before 3.17 retransmits in initial-responder states, which allows remote attackers to cause a denial of service (traffic amplification) via a spoofed UDP packet. NOTE: the original behavior complies with the IKEv1 protocol, but has a required security update from the libreswan vendor; as of 2016-06-10, it is expected that several other IKEv1 implementations will have vendor-required security updates, with separate CVE IDs assigned to each.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Libreswan 拒绝服务漏洞
Vulnerability Description
Libreswan是软件开发者Paul Wouters所研发的一个类似于Openswan的IPsec实现，它主要用于保证数据传输中的安全性、完整性问题。 Libreswan 3.17之前版本的programs/pluto/ikev1.c文化中存在安全漏洞，该漏洞源于程序在initial-responder状态执行重发操作。远程攻击者可通过发送伪造的UDP数据包利用该漏洞造成拒绝服务（流量放大）。
CVSS Information
N/A
Vulnerability Type
N/A