Red Hat Security Advisory

RHSA-2011:1356

openswan security update

Released 2011-10-05 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server (v. 6) openswan-2.6.32-4.el6_1.2
Red Hat Enterprise Linux Server Optional (v. 6) openswan-2.6.32-4.el6_1.2, openswan-doc-2.6.32-4.el6_1.2

Fixes 1 record

TI-2011-02990 CVE-2011-3380 · GHSA-57qx-7wcp-85w9

Openswan 2.6.29 through 2.6.35 allows remote attackers to cause a denial of service (NULL…

LOW 27

Openswan 2.6.29 through 2.6.35 allows remote attackers to cause a denial of service (NULL pointer dereference and pluto IKE daemon crash) via an ISAKMP message with an invalid KEY_LENGTH attribute, which is not properly…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02273 Published 2011-11-17 Fixed