What’s Vulnerable › Vulnerabilities

CVE-2016-3071

• Severity: high (CVSS 7.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2016-04-18 · updated 2026-06-17
• Weakness: CWE-20

Description

Libreswan 3.16 might allow remote attackers to cause a denial of service (daemon restart) via an IKEv2 aes_xcbc transform.

Affected products

• Fedoraproject Fedora: 23, 24
• The Libreswan Project libreswan: 3.16

References

• http://download.libreswan.org/CHANGES
• http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182050.html
• http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182130.html
• http://www.securityfocus.com/bid/87295
• https://libreswan.org/security/CVE-2016-3071/CVE-2016-3071.txt
• http://download.libreswan.org/CHANGES
• http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182050.html
• http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182130.html
• http://www.securityfocus.com/bid/87295
• https://libreswan.org/security/CVE-2016-3071/CVE-2016-3071.txt

Get alerted when CVE-2016-3071 or the next vulnerability affects your stack