CVE-2015-3204

libreswan 3.9 through 3.12 allows remote attackers to cause a denial of service (daemon restart)...

5.0 MediumFix available

libreswan 3.9 through 3.12 allows remote attackers to cause a denial of service (daemon restart) via an IKEv1 packet with (1) unassigned bits set in the IPSEC DOI value or (2) the next payload value set to ISAKMP_NEXT_SAK.

Exploit likelihood

2.60%Up 1.4 points since Feb 4, 2022

What each source reports

NVD Score used 5.0

Record: CVE-2015-3204
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness: CWE-20
Updated: 2026-11-02

CVE List No score

Record: CVE-2015-3204
Updated: 2026-11-02

EUVDEUVD-2015-3270 No score

Record: EUVD-2015-3270
Updated: 2026-11-03

GitHub AdvisoriesGHSA-52gh-6xp3-9wpf No score

libreswan 3.9 through 3.12 allows remote attackers to cause a denial of service (daemon restart)...

Record: GHSA-52gh-6xp3-9wpf
Weakness: CWE-20
Updated: 2026-11-02

Affected products

libreswan

Affected packages

Affected packages
Package	Affected	Fixed
`libreswan` Red Hat:enterprise_linux:7::client	before 0:3.12-10.1.el7_1	0:3.12-10.1.el7_1
`libreswan-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.12-10.1.el7_1	0:3.12-10.1.el7_1
`libreswan` Red Hat:enterprise_linux:7::server	before 0:3.12-10.1.ael7b_1	0:3.12-10.1.ael7b_1
`libreswan-debuginfo` Red Hat:enterprise_linux:7::server	before 0:3.12-10.1.ael7b_1	0:3.12-10.1.ael7b_1
`libreswan` Red Hat:enterprise_linux:7::workstation	before 0:3.12-10.1.el7_1	0:3.12-10.1.el7_1
`libreswan-debuginfo` Red Hat:enterprise_linux:7::workstation	before 0:3.12-10.1.el7_1	0:3.12-10.1.el7_1

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2015-3204 is a medium vulnerability (CVSS 5.0) in Libreswan, published July 1, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.60%, the 85th percentile. Fixed in libreswan 0:3.12-10.1.el7_1.

References

Show 7 moreShow less