CVE-2019-10155CWE-354

The Libreswan Project has found a vulnerability in the processing of IKEv1 informational exchange packets which are encrypted and integrity protected using the…

Low · published June 12, 2019

CVSS v3.0
3.1
EPSS
1%
Percentile
41.6
In the wild
Unconfirmed
What it is

The Libreswan Project has found a vulnerability in the processing of IKEv1 informational exchange packets which are encrypted and integrity protected using the established IKE SA encryption and integrity keys, but as a receiver, the integrity check value was not verified. This issue affects versions before 3.29.

The record
Technical detail
CVSS v3.0
3.1 · LOW
Vector
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00500 · 41.6th percentile
Weakness
CWE-354 · Improper Validation of Integrity Check Value
Published
2019-06-12T13:51Z
EPSS history
Timeline
  • 12 JUN 13:51Z
    The Libreswan Project has found a vulnerability in the processing of IKEv1 informational exchange packets which are encrypted and integrity protected using the…
    cvelistv5