Red Hat Security AdvisoryRHSA-2013:0827
openswan security update
Released 2013-05-15 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) openswan-2.6.32-5.el5_9, openswan-2.6.32-5.el5_9.i386, openswan-2.6.32-5.el5_9.ia64 +5
- Red Hat Enterprise Linux Desktop (v. 6) openswan-2.6.32-20.el6_4
- Red Hat Enterprise Linux Desktop Optional (v. 6) openswan-2.6.32-20.el6_4, openswan-doc-2.6.32-20.el6_4
- Red Hat Enterprise Linux Server (v. 6) openswan-2.6.32-20.el6_4
- Red Hat Enterprise Linux Server Optional (v. 6) openswan-2.6.32-20.el6_4, openswan-doc-2.6.32-20.el6_4
- Red Hat Enterprise Linux Workstation (v. 6) openswan-2.6.32-20.el6_4
- Red Hat Enterprise Linux Workstation Optional (v. 6) openswan-2.6.32-20.el6_4, openswan-doc-2.6.32-20.el6_4
Fixes 1 record
Priority LOW 35
Buffer overflow in the atodn function in Openswan before 2.6.39, when Opportunistic Encryption is enabled and an RSA key is being used, allows remote attackers to cause a denial of service (pluto IKE daemon crash) and po…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.02447 · Published 2013-07-09 · Fixed CWE-119
