{
  "schema_version": "1.4.0",
  "id": "GHSA-m56r-f6p2-qgw5",
  "modified": "2025-04-12T12:53:51Z",
  "published": "2022-05-17T03:33:10Z",
  "aliases": [
    "CVE-2015-3240"
  ],
  "details": "The pluto IKE daemon in libreswan before 3.15 and Openswan before 2.6.45, when built with NSS, allows remote attackers to cause a denial of service (assertion failure and daemon restart) via a zero DH g^x value in a KE payload in a IKE packet.",
  "severity": [],
  "affected": [],
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-3240"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2015:1979"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/security/cve/CVE-2015-3240"
    },
    {
      "type": "WEB",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1232320"
    },
    {
      "type": "WEB",
      "url": "https://libreswan.org/security/CVE-2015-3240"
    },
    {
      "type": "WEB",
      "url": "https://libreswan.org/security/CVE-2015-3240/CVE-2015-3240.txt"
    },
    {
      "type": "WEB",
      "url": "https://lists.openswan.org/pipermail/users/2015-August/023401.html"
    },
    {
      "type": "WEB",
      "url": "https://security.gentoo.org/glsa/201603-13"
    },
    {
      "type": "WEB",
      "url": "http://rhn.redhat.com/errata/RHSA-2015-1979.html"
    },
    {
      "type": "WEB",
      "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/77536"
    },
    {
      "type": "WEB",
      "url": "http://www.securitytracker.com/id/1033418"
    }
  ],
  "database_specific": {
    "cwe_ids": [],
    "severity": "MODERATE",
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2015-11-09T16:59:00Z"
  }
}