Description
Libreswan 3.6 allows remote attackers to cause a denial of service (crash) via a small length value and (1) no version or (2) an invalid major number in an IKE packet.
References
- 56276 third-party-advisory
- [Swan-announce] 20131211 Libreswan 3.7 released mailing-list
- FEDORA-2013-23315 vendor-advisory
- https://libreswan.org/security/CVE-2013-4564/CVE-2013-4564.txt.asc
- FEDORA-2013-23250 vendor-advisory
- FEDORA-2013-23299 vendor-advisory