CVE-2016-3071

Name of the Vulnerable Software and Affected Versions Libreswan version 3.16

Description The issue might allow remote attackers to cause a denial of service, resulting in a daemon restart, via an IKEv2 aes xcbc transform.

Recommendations For Libreswan version 3.16, consider updating to a newer version that contains a fix for this issue, if available. As a temporary workaround, restrict access to the IKEv2 aes xcbc transform to minimize the risk of exploitation.