Lucene search

K
osvGoogleOSV:DSA-201
HistoryDec 02, 2002 - 12:00 a.m.

freeswan - denial of service

2002-12-0200:00:00
Google
osv.dev
4

0.033 Low

EPSS

Percentile

91.4%

Bindview
discovered
a problem in several IPSEC implementations that do
not properly handle certain very short packets. IPSEC is a set of
security extensions to IP which provide authentication and encryption.
Free/SWan in Debian is affected by this and is said to cause a kernel
panic.

This problem has been fixed in version 1.96-1.4 for the current stable
distribution (woody) and in version 1.99-1 for the unstable
distribution (sid). The old stable distribution (potato) does not
contain Free/SWan packages.

We recommend that you upgrade your freeswan package.

CPENameOperatorVersion
freeswaneq1.96-1.2

0.033 Low

EPSS

Percentile

91.4%