Moderate: Red Hat Security Advisory: openswan security update

Updated openswan packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...

openswan: dereferencing missing IKEv2 payloads causes pluto daemon to restart

Openswan 2.6.39 and earlier allows remote attackers to cause a denial of service NULL pointer dereference and IKE daemon restart via IKEv2 packets that lack expected payloads...

openswan security update

2.6.32-27.2 - Resolves: rhbz1050337 CVE-2013-6466 refix for delete/notify code 2.6.32-27.1 - Resolves: rhbz1050337 CVE-2013-6466...

SuSE 11.2 Security Update : openswan (SAT Patch Number 8815)

This update fixes a Denial of Service DoS vulnerability via IKEv2 I1 notifications in openswan. CVE-2013-7294 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information...

[SECURITY] Fedora 20 Update: libreswan-3.8-1.fc20

Libreswan is a free implementation of IPsec & IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks. Everything passing through the...

[SECURITY] Fedora 19 Update: libreswan-3.8-1.fc19

Libreswan is a free implementation of IPsec & IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks. Everything passing through the...

CVE-2013-6466

Openswan 2.6.39 and earlier allows remote attackers to cause a denial of service NULL pointer dereference and IKE daemon restart via IKEv2 packets that lack expected payloads...

Null pointer dereference

Openswan 2.6.39 and earlier allows remote attackers to cause a denial of service NULL pointer dereference and IKE daemon restart via IKEv2 packets that lack expected payloads...

CVE-2013-6466

Openswan 2.6.39 and earlier allows remote attackers to cause a denial of service NULL pointer dereference and IKE daemon restart via IKEv2 packets that lack expected payloads...

CVE-2013-6466

Openswan 2.6.39 and earlier allows remote attackers to cause a denial of service NULL pointer dereference and IKE daemon restart via IKEv2 packets that lack expected payloads...

CVE-2013-6466

Openswan 2.6.39 and earlier allows remote attackers to cause a denial of service NULL pointer dereference and IKE daemon restart via IKEv2 packets that lack expected payloads...

CVE-2013-6466

Summary (CVE-2013-6466) Openswan 2.6.39 and earlier, when used in some devices (e.g., mGuard firmware 8.0.0–8.5.1), is vulnerable to a remote denial of service via crafted IKEv2 payloads that trigger a NULL pointer dereference in the IKE daemon. The issue allows an attacker to cause the Pluto/IKE...

PT-2014-1910

Name of the Vulnerable Software and Affected Versions Openswan versions prior to 2.6.39 Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and IKE daemon restart, via IKEv2 packets that lack expected payloads. This can lead to...

CVE-2013-6466: Undefined Security Weakness

Openswan 2.6.39 and earlier allows remote attackers to cause a denial of service NULL pointer dereference and IKE daemon restart via IKEv2 packets that lack expected payloads...

GLSA-201401-09 : Openswan: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201401-09 Openswan: User-assisted execution of arbitrary code A buffer overflow flaw has been discovered in Openswan when using Opportunistic Encryption. Impact : A remote attacker could send a specially crafted DNS TXT record,...

Openswan: User-assisted execution of arbitrary code

Background Openswan is an implementation of IPsec for Linux. Description A buffer overflow flaw has been discovered in Openswan when using Opportunistic Encryption. Impact A remote attacker could send a specially crafted DNS TXT record, possibly resulting in execution of arbitrary code with the...

Amazon Linux AMI : openswan (ALAS-2013-192)

A buffer overflow flaw was found in Openswan. If Opportunistic Encryption were enabled 'oe=yes' in '/etc/ipsec.conf' and an RSA key configured, an attacker able to cause a system to perform a DNS lookup for an attacker-controlled domain containing malicious records such as by sending an email tha...

Amazon Linux AMI : openswan (ALAS-2011-06)

When an ISAKMP message with an invalid KEYLENGTH attribute is received, the error handling function crashes on a NULL pointer dereference. Openswan automatically restarts the pluto IKE daemon but all ISAKMP state is lost. This vulnerability does NOT allow an attacker access to the system. This ca...

Amazon Linux AMI : openswan (ALAS-2011-18)

A use-after-free flaw was found in the way Openswan's pluto IKE daemon used cryptographic helpers. A remote, authenticated attacker could send a specially crafted IKE packet that would crash the pluto daemon. This issue only affected SMP symmetric multiprocessing systems that have the cryptograph...

CentOS Update for nspr CESA-2013:1135 centos5

Check for the Version of nspr OpenVAS Vulnerability Test CentOS Update for nspr CESA-2013:1135 centos5 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...