Red Hat Security AdvisoryRHSA-2014:0185
openswan security update
Released 2014-02-18 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) openswan-2.6.32-7.3.el5_10, openswan-2.6.32-7.3.el5_10.i386, openswan-2.6.32-7.3.el5_10.ia64 +5
- Red Hat Enterprise Linux Desktop (v. 5 client) openswan-2.6.32-7.3.el5_10, openswan-2.6.32-7.3.el5_10.i386, openswan-doc-2.6.32-7.3.el5_10 +1
- Red Hat Enterprise Linux Desktop (v. 6) openswan-2.6.32-27.2.el6_5
- Red Hat Enterprise Linux Desktop Optional (v. 6) openswan-2.6.32-27.2.el6_5, openswan-doc-2.6.32-27.2.el6_5
- Red Hat Enterprise Linux Server (v. 6) openswan-2.6.32-27.2.el6_5
- Red Hat Enterprise Linux Server Optional (v. 6) openswan-2.6.32-27.2.el6_5, openswan-doc-2.6.32-27.2.el6_5
- Red Hat Enterprise Linux Workstation (v. 6) openswan-2.6.32-27.2.el6_5
- Red Hat Enterprise Linux Workstation Optional (v. 6) openswan-2.6.32-27.2.el6_5, openswan-doc-2.6.32-27.2.el6_5
Fixes 1 record
Priority LOW 28
Openswan 2.6.39 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon restart) via IKEv2 packets that lack expected payloads.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02664 · Published 2014-01-26 · Fixed
