CVE-2013-6466

Summary (CVE-2013-6466) Openswan 2.6.39 and earlier, when used in some devices (e.g., mGuard firmware 8.0.0–8.5.1), is vulnerable to a remote denial of service via crafted IKEv2 payloads that trigger a NULL pointer dereference in the IKE daemon. The issue allows an attacker to cause the Pluto/IKE...

CVE-2013-6466

Openswan 2.6.39 and earlier allows remote attackers to cause a denial of service NULL pointer dereference and IKE daemon restart via IKEv2 packets that lack expected payloads...

GLSA-201401-09 : Openswan: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201401-09 Openswan: User-assisted execution of arbitrary code A buffer overflow flaw has been discovered in Openswan when using Opportunistic Encryption. Impact : A remote attacker could send a specially crafted DNS TXT record,...

Openswan: User-assisted execution of arbitrary code

Background Openswan is an implementation of IPsec for Linux. Description A buffer overflow flaw has been discovered in Openswan when using Opportunistic Encryption. Impact A remote attacker could send a specially crafted DNS TXT record, possibly resulting in execution of arbitrary code with the...

Amazon Linux AMI : openswan (ALAS-2011-18)

A use-after-free flaw was found in the way Openswan's pluto IKE daemon used cryptographic helpers. A remote, authenticated attacker could send a specially crafted IKE packet that would crash the pluto daemon. This issue only affected SMP symmetric multiprocessing systems that have the cryptograph...

Amazon Linux AMI : openswan (ALAS-2013-192)

A buffer overflow flaw was found in Openswan. If Opportunistic Encryption were enabled 'oe=yes' in '/etc/ipsec.conf' and an RSA key configured, an attacker able to cause a system to perform a DNS lookup for an attacker-controlled domain containing malicious records such as by sending an email tha...

Amazon Linux AMI : openswan (ALAS-2011-06)

When an ISAKMP message with an invalid KEYLENGTH attribute is received, the error handling function crashes on a NULL pointer dereference. Openswan automatically restarts the pluto IKE daemon but all ISAKMP state is lost. This vulnerability does NOT allow an attacker access to the system. This ca...

CentOS Update for nspr CESA-2013:1135 centos5

Check for the Version of nspr OpenVAS Vulnerability Test CentOS Update for nspr CESA-2013:1135 centos5 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

CentOS 5 : nss (CESA-2013:1135)

Updated nss and nspr packages that fix two security issues, various bugs, and add enhancements are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which...

Oracle Linux 5 / 6 : openswan (ELSA-2013-0827)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0827 advisory. 2.6.32-20 Resolves: 960234 - CVE-2013-2053 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 5 : openswan (ELSA-2009-1138)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2009-1138 advisory. 2.6.14-1.3 - security update CVE-2009-2185 Resolves: CVE-2009-2185 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 6 : openswan (ELSA-2010-0892)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0892 advisory. 2.6.24-8.1 Resolves: 635058 CVE-2010-3302 CVE-2010-3308 CVE-2010-2752 CVE-2010-3753 Tenable has extracted the preceding description block directly from...

Oracle Linux 5 : openswan (ELSA-2009-0402)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-0402 advisory. 2.6.14-1.2 - security update CVE-2009-0790, CVE-2008-4190 Resolves: CVE-2009-0790, CVE-2008-4190 Tenable has extracted the preceding description block...

Oracle Linux 5 / 6 : openswan (ELSA-2011-1422)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-1422 advisory. 2.6.32-4.4 Resolves: 748969 CVE-2011-4073 updated patch by upstream 2.6.32-4.3 Resolves: 748969 CVE-2011-4073 Tenable has extracted the preceding descriptio...

Oracle Linux 6 : openswan (ELSA-2011-1356)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-1356 advisory. 2.6.32-4.2 Resolves: 742069 CVE-2011-3380 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Ness...

CVE-2013-2053

Buffer overflow in the atodn function in Openswan before 2.6.39, when Opportunistic Encryption is enabled and an RSA key is being used, allows remote attackers to cause a denial of service pluto IKE daemon crash and possibly execute arbitrary code via crafted DNS TXT records. NOTE: this might be...

CVE-2013-2053

Buffer overflow in the atodn function in Openswan before 2.6.39, when Opportunistic Encryption is enabled and an RSA key is being used, allows remote attackers to cause a denial of service pluto IKE daemon crash and possibly execute arbitrary code via crafted DNS TXT records. NOTE: this might be...

Buffer overflow

Buffer overflow in the atodn function in Openswan before 2.6.39, when Opportunistic Encryption is enabled and an RSA key is being used, allows remote attackers to cause a denial of service pluto IKE daemon crash and possibly execute arbitrary code via crafted DNS TXT records. NOTE: this might be...

CVE-2013-2053

Buffer overflow in the atodn function in Openswan before 2.6.39, when Opportunistic Encryption is enabled and an RSA key is being used, allows remote attackers to cause a denial of service pluto IKE daemon crash and possibly execute arbitrary code via crafted DNS TXT records. NOTE: this might be...

CVE-2013-2053

CVE-2013-2053 is a remote, buffer overflow vulnerability in the Openswan 2.6.x codebase (atodn()) that can be triggered when Opportunistic Encryption is enabled and the peer’s DNS PTR record is attacker-controlled. An adversary could cause the pluto IKE daemon to crash and, in some cases, execute...