Libreswan 3.6 allows remote attackers to cause a denial of service (crash) via a small length value and (1) no version or (2) an invalid major number in an IKE packet.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Libreswan | Libreswan | 3.6 (including) | 3.6 (including) |