Lucene search
HistoryNov 17, 2011 - 7:55 p.m.
CVE-2011-4073
cve-2011-4073
use-after-free
openswan
cryptographic helper handler
denial of service
remote authentication
5.8 Medium
AI Score
Confidence
Low
4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:N/I:N/A:P
0.01 Low
EPSS
Percentile
83.7%
Use-after-free vulnerability in the cryptographic helper handler functionality in Openswan 2.3.0 through 2.6.36 allows remote authenticated users to cause a denial of service (pluto IKE daemon crash) via vectors related to the (1) quick_outI1_continue and (2) quick_outI1 functions.
References
Related
nessus
nessus
Fedora 16 : openswan-2.6.37-1.fc16 (2011-15196)
2011-12-12 00:00:00
Debian DSA-2374-1 : openswan - implementation error
2012-01-12 00:00:00
SuSE 11.1 Security Update : openswan (SAT Patch Number 5424)
2011-12-13 00:00:00
openvas
openvas
Debian Security Advisory DSA 2374-1 (openswan)
2012-02-11 00:00:00
Oracle: Security Advisory (ELSA-2011-1422)
2015-10-06 00:00:00
Amazon Linux: Security Advisory (ALAS-2011-18)
2015-09-08 00:00:00
oraclelinux
oraclelinux
openswan security update
2011-11-02 00:00:00
securityvulns
securityvulns
OpenSWAN use-after-free
2012-01-09 00:00:00
CVE-2011-4073 Openswan crypto helper crasher
2012-01-09 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 01:03:19
osv
osv
openswan - implementation error
2011-12-26 00:00:00
amazon
amazon
Medium: openswan
2011-11-09 21:34:00
prion
prion
Design/Logic Flaw
2011-11-17 19:55:00
centos
centos
openswan security update
2011-11-03 03:50:42
debian
debian
[BSA-061] Security Update for openswan
2012-01-02 20:07:53
[BSA-061] Security Update for openswan
2012-01-17 09:00:02
[SECURITY] [DSA 2374-1] openswan security update
2011-12-26 12:48:11
cvelist
cvelist
CVE-2011-4073
2011-11-17 19:00:00
fedora
fedora
[SECURITY] Fedora 16 Update: openswan-2.6.37-1.fc16
2011-12-10 19:48:36
[SECURITY] Fedora 15 Update: openswan-2.6.37-1.fc15
2011-12-10 19:56:46
[SECURITY] Fedora 14 Update: openswan-2.6.33-3.fc14
2011-12-10 19:50:44
redhat
redhat
(RHSA-2011:1422) Moderate: openswan security update
2011-11-02 00:00:00
ubuntucve
ubuntucve
CVE-2011-4073
2011-11-17 00:00:00
gentoo
gentoo
Openswan: Denial of service
2012-03-16 00:00:00
5.8 Medium
AI Score
Confidence
Low
4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:N/I:N/A:P
0.01 Low
EPSS
Percentile
83.7%
Related for CVE-2011-4073