Cross site scripting

An out-of-bounds buffer read flaw was found in the pluto daemon of libreswan from versions 3.27 till 3.31 where, an unauthenticated attacker could use this flaw to crash libreswan by sending specially-crafted IKEv1 Informational Exchange packets. The daemon respawns after the crash...

CVE-2020-1763

Libreswan pluto daemon contained an out-of-bounds buffer read in versions 3.27–3.31. An unauthenticated attacker could crash libreswan by sending specially crafted IKEv1 Informational Exchange packets; the daemon respawns after the crash. Documented advisories from Debian, Mageia, Gentoo, and oth...

CVE-2020-1763

An out-of-bounds buffer read flaw was found in the pluto daemon of libreswan. An unauthenticated attacker could use this flaw to crash libreswan by sending specially-crafted IKEv1 Informational Exchange packets. The daemon respawns after the crash. Mitigation Red Hat has investigated whether a...

libreswan: DoS attack via malicious IKEv1 informational exchange message

An out-of-bounds buffer read flaw was found in the pluto daemon of libreswan. An unauthenticated attacker could use this flaw to crash libreswan by sending specially-crafted IKEv1 Informational Exchange packets. The daemon respawns after the crash...

Denial Of Service (DoS)

openswan is vulnerable to denial of service DoS. The vulnerability exists through the way Openswan's pluto IKE daemon processed some fields of X.509 certificates. A remote attacker could provide a specially-crafted X.509 certificate that would crash the pluto daemon...

Denial Of Service (DoS)

openswan is vulnerable to denial of service DoS. The vulnerability exists as a flaw in the Dead Peer Detection DPD in Openswan's pluto IKE daemon. A remote attacker could use a malicious DPD packet to crash the pluto daemon...

DEBIAN-CVE-2019-12312

In Libreswan 3.27 an assertion failure can lead to a pluto IKE daemon restart. An attacker can trigger a NULL pointer dereference by initiating an IKEv2 IKESAINIT exchange, followed by a bogus INFORMATIONAL exchange instead of the normallly expected IKEAUTH exchange. This affects...

Libreswan Denial of Service Vulnerability (CNVD-2017-13245)

Libreswan is an IPsec implementation similar to Openswan, which is mainly used to ensure security, integrity issues in data transmission. A security vulnerability exists in Libreswan versions prior to 3.18. A remote attacker can exploit this vulnerability to cause a denial of service null pointer...

CVE-2016-5391

libreswan before 3.18 allows remote attackers to cause a denial of service NULL pointer dereference and pluto daemon restart...

CVE-2016-5391

libreswan before 3.18 allows remote attackers to cause a denial of service NULL pointer dereference and pluto daemon restart...

CVE-2016-5391

libreswan before 3.18 allows remote attackers to cause a denial of service NULL pointer dereference and pluto daemon restart...

CVE-2016-5391

libreswan before 3.18 allows remote attackers to cause a denial of service NULL pointer dereference and pluto daemon restart...

PT-2017-8714 · Libreswan · Libreswan

Name of the Vulnerable Software and Affected Versions: libreswan versions prior to 3.18 Description: The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and a restart of the pluto daemon. Recommendations: For versions prior to 3.18, update to...

openswan: dereferencing missing IKEv2 payloads causes pluto daemon to restart

Openswan 2.6.39 and earlier allows remote attackers to cause a denial of service NULL pointer dereference and IKE daemon restart via IKEv2 packets that lack expected payloads...

DSA-2789-1 strongswan - Denial of service and authorization bypass

Bulletin has no description...

DEBIAN-CVE-2013-2054

Buffer overflow in the atodn function in strongSwan 2.0.0 through 4.3.4, when Opportunistic Encryption is enabled and an RSA key is being used, allows remote attackers to cause a denial of service pluto IKE daemon crash and possibly execute arbitrary code via crafted DNS TXT records. NOTE: this...

Scientific Linux Security Update : openswan on SL5.x i386/x86_64

Gerd v. Egidy discovered a flaw in the Dead Peer Detection DPD in Openswan's pluto IKE daemon. A remote attacker could use a malicious DPD packet to crash the pluto daemon. CVE-2009-0790 It was discovered that Openswan's livetest script created temporary files in an insecure manner. A local...

RedHat Update for openswan RHSA-2011:1356-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Medium: openswan

Issue Overview: A NULL pointer dereference flaw was found in the way Openswan's pluto IKE daemon handled certain error conditions. A remote, unauthenticated attacker could send a specially-crafted IKE packet that would crash the pluto daemon. Affected Packages: openswan Issue Correction: Run yum...

openswan: IKE invalid key length allows remote unauthenticated user to crash openswan

Openswan 2.6.29 through 2.6.35 allows remote attackers to cause a denial of service NULL pointer dereference and pluto IKE daemon crash via an ISAKMP message with an invalid KEYLENGTH attribute, which is not properly handled by the error handling function...