AmazonALAS-2011-006Medium: openswan
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.007 Low
EPSS
Percentile
81.0%
Issue Overview:
A NULL pointer dereference flaw was found in the way Openswan’s pluto IKE daemon handled certain error conditions. A remote, unauthenticated attacker could send a specially-crafted IKE packet that would crash the pluto daemon.
Affected Packages:
openswan
Issue Correction:
Run yum update openswan to update your system.
New Packages:
i686:
openswan-debuginfo-2.6.36-1.12.amzn1.i686
openswan-2.6.36-1.12.amzn1.i686
openswan-doc-2.6.36-1.12.amzn1.i686
src:
openswan-2.6.36-1.12.amzn1.src
x86_64:
openswan-2.6.36-1.12.amzn1.x86_64
openswan-debuginfo-2.6.36-1.12.amzn1.x86_64
openswan-doc-2.6.36-1.12.amzn1.x86_64
Additional References
Red Hat: CVE-2011-3380
Mitre: CVE-2011-3380
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Amazon Linux | 1 | i686 | openswan-debuginfo | < 2.6.36-1.12.amzn1 | openswan-debuginfo-2.6.36-1.12.amzn1.i686.rpm |
| Amazon Linux | 1 | i686 | openswan | < 2.6.36-1.12.amzn1 | openswan-2.6.36-1.12.amzn1.i686.rpm |
| Amazon Linux | 1 | i686 | openswan-doc | < 2.6.36-1.12.amzn1 | openswan-doc-2.6.36-1.12.amzn1.i686.rpm |
| Amazon Linux | 1 | x86_64 | openswan | < 2.6.36-1.12.amzn1 | openswan-2.6.36-1.12.amzn1.x86_64.rpm |
| Amazon Linux | 1 | x86_64 | openswan-debuginfo | < 2.6.36-1.12.amzn1 | openswan-debuginfo-2.6.36-1.12.amzn1.x86_64.rpm |
| Amazon Linux | 1 | x86_64 | openswan-doc | < 2.6.36-1.12.amzn1 | openswan-doc-2.6.36-1.12.amzn1.x86_64.rpm |
Related
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.007 Low
EPSS
Percentile
81.0%