Red Hat Security AdvisoryRHSA-2011:1422
openswan security update
Released 2011-11-02 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) openswan-2.6.21-5.el5_7.6, openswan-2.6.21-5.el5_7.6.i386, openswan-2.6.21-5.el5_7.6.ia64 +5
- Red Hat Enterprise Linux Desktop (v. 5 client) openswan-2.6.21-5.el5_7.6, openswan-2.6.21-5.el5_7.6.i386, openswan-doc-2.6.21-5.el5_7.6 +1
- Red Hat Enterprise Linux Server (v. 6) openswan-2.6.32-4.el6_1.4
- Red Hat Enterprise Linux Server Optional (v. 6) openswan-2.6.32-4.el6_1.4, openswan-doc-2.6.32-4.el6_1.4
Fixes 1 record
Priority LOW 23
Use-after-free vulnerability in the cryptographic helper handler functionality in Openswan 2.3.0 through 2.6.36 allows remote authenticated users to cause a denial of service (pluto IKE daemon crash) via vectors related…
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.02086 · Published 2011-11-17 · Fixed CWE-399
