FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

strongswan -- Denial-of-service and potential remote code execution vulnerability

Affected packages
5.2.2 <= strongswan < 5.3.1

Details

VuXML ID 55363e65-0e71-11e5-8027-00167671dd1d
Discovery 2015-05-15
Entry 2015-06-09
Modified 2015-09-28

StrongSwan Project reports

A denial-of-service and potential remote code execution vulnerability triggered by crafted IKE messages was discovered in strongSwan. Versions 5.2.2 and 5.3.0 are affected.

References

CVE Name CVE-2015-3991
URL https://www.strongswan.org/blog/2015/06/01/strongswan-vulnerability-(cve-2015-3991).html