CVE-2015-3991

strongSwan 5.2.2 and 5.3.0 allows remote attackers to cause a denial of service (daemon crash) or execute arbitrary code.

• CWE-19

• http://lists.fedoraproject.org/pipermail/package-announce/2015-August/164276.htmlThird Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-August/164278.htmlThird Party Advisory
• http://www.securityfocus.com/bid/76861Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1222815Issue Tracking, Third Party Advisory
• https://www.strongswan.org/blog/2015/06/01/strongswan-vulnerability-%28cve-2015-3991%29.html
• http://lists.fedoraproject.org/pipermail/package-announce/2015-August/164276.htmlThird Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-August/164278.htmlThird Party Advisory
• http://www.securityfocus.com/bid/76861Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1222815Issue Tracking, Third Party Advisory
• https://www.strongswan.org/blog/2015/06/01/strongswan-vulnerability-%28cve-2015-3991%29.html

Published

Sep 7, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-3983The pcs daemon (pcsd) in PCS 0.9.137 and earlier does not in…
• CVE-2015-3986Cross-site request forgery (CSRF) vulnerability in the TheCa…
• CVE-2015-3987Multiple unquoted Windows search path vulnerabilities in the…
• CVE-2015-3988Multiple cross-site scripting (XSS) vulnerabilities in OpenS…
• CVE-2015-3989Multiple cross-site scripting (XSS) vulnerabilities in concr…
• CVE-2015-3990The GMS ViewPoint (GMSVP) web application in Dell Sonicwall …
• CVE-2015-3993Actian Matrix 5.1.x through 5.1.2.4 and 5.2.x through 5.2.0.…
• CVE-2015-3994The grant.xsfunc application in testApps/grantAccess/ in the…
• CVE-2015-3995SAP HANA DB 1.00.73.00.389160 (NewDB100_REL) allows remote a…
• CVE-2015-3996The default AFSecurityPolicy.validatesDomainName configurati…
• CVE-2015-3998Cross-site scripting (XSS) vulnerability in phpwhois 4.2.5, …
• CVE-2015-3999Piriform CCleaner 3.26.0.1988 through 5.02.5101 writes the f…