已对于 CVE-2016-5391 rhbz#1361164 与 VTI 支持更新至 3.18

请注意，Tenable Network Security 已直接从 Fedora 更新系统网站提取上述描述块。
Tenable 已尝试在不引入其他问题的情况下尽可能进行了自动整理和排版。

已針對 CVE-2016-5391 rhbz#1361164 與 VTI 支援更新至 3.18

請注意，Tenable Network Security 已直接從 Fedora 更新系統網站擷取前置描述區塊。
Tenable 已盡量在不造成其他問題的前提下，嘗試自動清理並將其格式化。

CVE-2016-5391 rhbz#1361164 および VTI サポートのために 3.18 に更新されました

注意：Tenable Network Security は、前述の説明ブロックを Fedora 更新システム Web サイトから直接抽出しています。
Tenable では、できる限り新たな問題を持ち込まないように、自動的に整理して書式設定するようにしています。

Updated to 3.18 for CVE-2016-5391 rhbz#1361164 and VTI support

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote NewStart CGSL host, running version MAIN 6.06, has libreswan packages installed that are affected by multiple vulnerabilities:

  - pluto in Libreswan before 4.11 allows a denial of service (responder SPI mishandling and daemon crash) via     unauthenticated IKEv1 Aggressive Mode packets. The earliest affected version is 3.28. (CVE-2023-30570)

  - Buffer overflow in the atodn function in libreswan 3.0 and 3.1, when Opportunistic Encryption is enabled     and an RSA key is being used, allows remote attackers to cause a denial of service (pluto IKE daemon     crash) and possibly execute arbitrary code via crafted DNS TXT records. NOTE: this might be the same     vulnerability as CVE-2013-2053 and CVE-2013-2054. (CVE-2013-2052)

  - Libreswan 3.6 allows remote attackers to cause a denial of service (crash) via a small length value and     (1) no version or (2) an invalid major number in an IKE packet. (CVE-2013-4564)

  - Libreswan 3.7 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference     and IKE daemon restart) via IKEv2 packets that lack expected payloads. (CVE-2013-6467)

  - libreswan 3.9 through 3.12 allows remote attackers to cause a denial of service (daemon restart) via an     IKEv1 packet with (1) unassigned bits set in the IPSEC DOI value or (2) the next payload value set to     ISAKMP_NEXT_SAK. (CVE-2015-3204)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
92684	Fedora 24：libreswan (2016-26a03340e6)	Nessus	Fedora Local Security Checks	2016/8/3	2026/1/29	high
92809	Fedora 23：libreswan (2016-d46685629d)	Nessus	Fedora Local Security Checks	2016/8/9	2026/1/29	high
92684	Fedora 24：libreswan (2016-26a03340e6)	Nessus	Fedora Local Security Checks	2016/8/3	2026/1/29	high
92809	Fedora 23：libreswan (2016-d46685629d)	Nessus	Fedora Local Security Checks	2016/8/9	2026/1/29	high
92809	Fedora 23：libreswan（2016-d46685629d）	Nessus	Fedora Local Security Checks	2016/8/9	2026/1/29	high
92684	Fedora 24：libreswan（2016-26a03340e6）	Nessus	Fedora Local Security Checks	2016/8/3	2026/1/29	high
92809	Fedora 23 : libreswan (2016-d46685629d)	Nessus	Fedora Local Security Checks	2016/8/9	2026/1/29	high
92684	Fedora 24 : libreswan (2016-26a03340e6)	Nessus	Fedora Local Security Checks	2016/8/3	2026/1/29	high
323228	NewStart CGSL MAIN 6.06 : libreswan Multiple Vulnerabilities (NS-SA-2025-0243)	Nessus	NewStart CGSL Local Security Checks	2026/6/27	2026/6/27	high

检测

插件搜索

high

high

high

high

high

high

high

high

high