OP
Product
Openswan
16
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 0Low 1
Watch
Add Openswan to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-15836 | 7.5 | Sep 26 | In verify_signed_hash() in lib/liboswkeys/signatures.c in Openswan before 2.6.50.1, the RSA implementation does not verify the value of padding string during PKCS#1 v1.5 signature… Affected: before 2.6.50.1 |
| CVE-2019-10155 | 3.1 | Jun 12 | The Libreswan Project has found a vulnerability in the processing of IKEv1 informational exchange packets which are encrypted and integrity protected using the established IKE SA… Affected: All versions, or not specified |
| CVE-2014-2037 | – | Nov 26 | Openswan 2.6.40 allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon restart) via IKEv2 packets that lack expected payloads Affected: 2.6.40 |
| CVE-2013-6466 | – | Jan 26 | Openswan 2.6.39 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon restart) via IKEv2 packets that lack expected payloads Affected: through 2.6.39; 2.3.0; 2.3.1; 2.4.0; 2.4.1; 2.4.2; +34 more |
| CVE-2013-2053 | – | Jul 9 | Buffer overflow in the atodn function in Openswan before 2.6.39, when Opportunistic Encryption is enabled and an RSA key is being used, allows remote attackers to cause a denial… Affected: through 2.6.38; 2.6.01; 2.6.02; 2.6.03; 2.6.04; 2.6.05; +32 more |
| CVE-2011-4073 | – | Nov 17 | Use-after-free vulnerability in the cryptographic helper handler functionality in Openswan 2.3.0 through 2.6.36 allows remote authenticated users to cause a denial of service… Affected: 2.3.0; 2.3.1; 2.4.0; 2.4.1; 2.4.2; 2.4.3; +34 more |
| CVE-2011-3380 | – | Nov 17 | Openswan 2.6.29 through 2.6.35 allows remote attackers to cause a denial of service (NULL pointer dereference and pluto IKE daemon crash) via an ISAKMP message with an invalid… Affected: 2.6.29; 2.6.30; 2.6.31; 2.6.32; 2.6.33; 2.6.34; +1 more |
| CVE-2010-3753 | – | Oct 5 | programs/pluto/xauth.c in the client in Openswan 2.6.26 through 2.6.28 allows remote authenticated gateways to execute arbitrary commands via shell metacharacters in the… Affected: 2.6.26; 2.6.27; 2.6.28 |
| CVE-2010-3752 | – | Oct 5 | programs/pluto/xauth.c in the client in Openswan 2.6.25 through 2.6.28 allows remote authenticated gateways to execute arbitrary commands via shell metacharacters in (1)… Affected: 2.6.25; 2.6.26; 2.6.27; 2.6.28 |
| CVE-2010-3308 | – | Oct 5 | Buffer overflow in programs/pluto/xauth.c in the client in Openswan 2.6.26 through 2.6.28 might allow remote authenticated gateways to execute arbitrary code or cause a denial of… Affected: 2.6.26; 2.6.27; 2.6.28 |
| CVE-2010-3302 | – | Oct 5 | Buffer overflow in programs/pluto/xauth.c in the client in Openswan 2.6.25 through 2.6.28 might allow remote authenticated gateways to execute arbitrary code or cause a denial of… Affected: 2.6.25; 2.6.26; 2.6.27; 2.6.28 |
| CVE-2009-2185 | – | Jun 25 | The ASN.1 parser (pluto/asn1.c, libstrongswan/asn1/asn1.c, libstrongswan/asn1/asn1_parser.c) in (a) strongSwan 2.8 before 2.8.10, 4.2 before 4.2.16, and 4.3 before 4.3.2; and (b)… Affected: 2.4.0; 2.4.1; 2.4.2; 2.4.3; 2.4.4; 2.4.5; +20 more |
| CVE-2009-0790 | – | Apr 1 | The pluto IKE daemon in Openswan and Strongswan IPsec 2.6 before 2.6.21 and 2.4 before 2.4.14, and Strongswan 4.2 before 4.2.14 and 2.8 before 2.8.9, allows remote attackers to… Affected: 2.4.0; 2.4.1; 2.4.2; 2.4.3; 2.4.4; 2.4.5; +20 more |
| CVE-2008-4190 | – | Sep 24 | The IPSEC livetest tool in Openswan 2.4.12 and earlier, and 2.6.x through 2.6.16, allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack… Affected: 2.3.1; 2.4.0; 2.4.2; 2.4.4; 2.6.03; 2.6.04; +12 more |
| CVE-2005-3671 | – | Nov 18 | The Internet Key Exchange version 1 (IKEv1) implementation in Openswan 2 (openswan-2) before 2.4.4, and freeswan in SUSE LINUX 9.1 before 2.04_1.5.4-1.23, allow remote attackers… Affected: 2.4.0 |
| CVE-2005-0162 | – | Jan 26 | Stack-based buffer overflow in the get_internal_addresses function in the pluto application for Openswan 1.x before 1.0.9, and Openswan 2.x before 2.3.0, when compiled with XAUTH… Affected: 2.3.0 |
Showing 16