CVE-2011-3380

Openswan 2.6.29 through 2.6.35 allows remote attackers to cause a denial of service NULL pointer dereference and pluto IKE daemon crash via an ISAKMP message with an invalid KEYLENGTH attribute, which is not properly handled by the error handling function...

CVE-2011-4073

Use-after-free vulnerability in the cryptographic helper handler functionality in Openswan 2.3.0 through 2.6.36 allows remote authenticated users to cause a denial of service pluto IKE daemon crash via vectors related to the 1 quickoutI1continue and 2 quickoutI1 functions...

CVE-2011-3380

CVE-2011-3380 affects Openswan 2.6.29–2.6.35, allowing remote denial of service via a NULL pointer dereference in the pluto IKE daemon when handling an ISAKMP message with an invalid KEY_LENGTH attribute. The issue arises from improper error handling for that attribute, leading to a crash. Severa...

Medium: openswan

Issue Overview: A use-after-free flaw was found in the way Openswan's pluto IKE daemon used cryptographic helpers. A remote, authenticated attacker could send a specially-crafted IKE packet that would crash the pluto daemon. This issue only affected SMP symmetric multiprocessing systems that have...

openswan security update

CentOS Errata and Security Advisory CESA-2011:1422 Updated openswan packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS...

RedHat Update for openswan RHSA-2011:1422-01

Check for the Version of openswan OpenVAS Vulnerability Test RedHat Update for openswan RHSA-2011:1422-01 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

RedHat Update for openswan RHSA-2011:1422-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for openswan CESA-2011:1422 centos5 i386

Check for the Version of openswan OpenVAS Vulnerability Test CentOS Update for openswan CESA-2011:1422 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

RHEL 6 : openswan (RHSA-2011:1422)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:1422 advisory. Openswan is a free implementation of Internet Protocol Security IPsec and Internet Key Exchange IKE. IPsec uses strong cryptography to provide both...

CentOS 5 : openswan (CESA-2011:1422)

Updated openswan packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...

CentOS Update for openswan CESA-2011:1422 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

openswan: use-after-free vulnerability leads to DoS

Use-after-free vulnerability in the cryptographic helper handler functionality in Openswan 2.3.0 through 2.6.36 allows remote authenticated users to cause a denial of service pluto IKE daemon crash via vectors related to the 1 quickoutI1continue and 2 quickoutI1 functions...

Moderate: Red Hat Security Advisory: openswan security update

Updated openswan packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...

openswan security update

2.6.32-4.4 Resolves: 748969 CVE-2011-4073 updated patch by upstream 2.6.32-4.3 Resolves: 748969 CVE-2011-4073...

Fedora 16 : openswan-2.6.36-1.fc16 (2011-13825)

CVE-2011-3380 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Network...

[SECURITY] Fedora 16 Update: openswan-2.6.36-1.fc16

Openswan is a free implementation of IPsec & IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks. Everything passing through the...

Fedora Update for openswan FEDORA-2011-13862

Check for the Version of openswan OpenVAS Vulnerability Test Fedora Update for openswan FEDORA-2011-13862 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora 15 : openswan-2.6.36-1.fc15 (2011-13862)

Fixes for CVE-2011-3380 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

Fedora Update for openswan FEDORA-2011-13864

Check for the Version of openswan OpenVAS Vulnerability Test Fedora Update for openswan FEDORA-2011-13864 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora 14 : openswan-2.6.33-2.fc14 (2011-13864)

Fixes for CVE-2011-3380. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...