CVE-2014-2037

Openswan 2.6.40 allows remote attackers to cause a denial of service NULL pointer dereference and IKE daemon restart via IKEv2 packets that lack expected payloads. NOTE: this vulnerability exists because of an incomplete fix for CVE 2013-6466...

CVE-2014-2037

OpenSwan 2.6.40 is affected by CVE-2014-2037. The vulnerability allows remote attackers to cause a denial of service via IKEv2 packets that lack expected payloads, leading to a NULL pointer dereference and a restart of the IKE daemon. The issue is noted as stemming from an incomplete fix for CVE-...

CVE-2014-2037

Openswan 2.6.40 allows remote attackers to cause a denial of service NULL pointer dereference and IKE daemon restart via IKEv2 packets that lack expected payloads. NOTE: this vulnerability exists because of an incomplete fix for CVE 2013-6466...

GLSA-201411-07 : Openswan: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201411-07 Openswan: Denial of Service A NULL pointer dereference has been found in Openswan. Impact : A remote attacker could create a Denial of Service condition. Workaround : There is no known workaround at this time...

CentOS Update for kernel CESA-2014:1843 centos6

Check the version of kernel SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882079";...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

Amazon Linux AMI : openswan (ALAS-2011-6)

A NULL pointer dereference flaw was found in the way Openswan's pluto IKE daemon handled certain error conditions. A remote, unauthenticated attacker could send a specially crafted IKE packet that would crash the pluto daemon. C Tenable Network Security, Inc. The descriptive text and package chec...

Openswan <= 2.4.12/2.6.16 Insecure Temp File Creation Root Exploit

No description provided by source. !/bin/bash uglyswan - OpenSwan local root exploit CVE-2008-4190 description: The IPSEC livetest tool in Openswan 2.4.12 and earlier, and 2.6.x through 2.6.16, allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack on the ...

Openswan / Strongswan security vulnerabilities

Buffer overflow, DoS, protection bypass...

[SECURITY] [DSA 2893-1] openswan security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2893-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez March 31, 2014 http://www.debian.org/security/faq -...

Debian DSA-2893-1 : openswan - security update

Two vulnerabilities were fixed in Openswan, an IKE/IPsec implementation for Linux. - CVE-2013-2053 During an audit of Libreswan with which Openswan shares some code, Florian Weimer found a remote buffer overflow in the atodn function. This vulnerability can be triggered when Opportunistic...

[SECURITY] [DSA 2893-1] openswan security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2893-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez March 31, 2014 http://www.debian.org/security/faq -...

OpenSwan and StrongSwan DPD Packet Remote Denial of Service - Ver2 (CVE-2009-0790)

A denial-of-service vulnerability has been reported in OpenswanOpenswan Openswan. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

Debian Security Advisory DSA 2893-1 (openswan - security update)

Two vulnerabilities were fixed in Openswan, an IKE/IPsec implementation for Linux. CVE-2013-2053 During an audit of Libreswan with which Openswan shares some code, Florian Weimer found a remote buffer overflow in the atodn function. This vulnerability can be triggered when Opportunistic Encryptio...

DSA-2893-1 openswan - security update

Bulletin has no description...

Debian: Security Advisory (DSA-2893-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon Linux AMI : openswan (ALAS-2014-303)

A NULL pointer dereference flaw was discovered in the way Openswan's IKE daemon processed IKEv2 payloads. A remote attacker could send specially crafted IKEv2 payloads that, when processed, would lead to a denial of service daemon crash, possibly causing existing VPN connections to be dropped...

Medium: openswan

Issue Overview: A NULL pointer dereference flaw was discovered in the way Openswan's IKE daemon processed IKEv2 payloads. A remote attacker could send specially crafted IKEv2 payloads that, when processed, would lead to a denial of service daemon crash, possibly causing existing VPN connections t...

MGASA-2014-0097 Updated openswan packages fix CVE-2013-6466

Updated openswan packages fix security vulnerability: A NULL pointer dereference flaw was discovered in the way Openswan's IKE daemon processed IKEv2 payloads. A remote attacker could send specially crafted IKEv2 payloads that, when processed, would lead to a denial of service daemon crash,...

Updated openswan packages fix CVE-2013-6466

Updated openswan packages fix security vulnerability: A NULL pointer dereference flaw was discovered in the way Openswan's IKE daemon processed IKEv2 payloads. A remote attacker could send specially crafted IKEv2 payloads that, when processed, would lead to a denial of service daemon crash,...