Browse CVEs

HIGH 7.5 CVE-2018-15836 In verify_signed_hash() in lib/liboswkeys/signatures.c in Openswan before 2.6.50.1, the RSA implementation does not verify the value of padding strin… Openswan 2.6.50.1+ Fix from $1,9502018-09-26 MEDIUM 5.0 CVE-2014-2037 Openswan 2.6.40 allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon restart) via IKEv2 packets that lack ex… Openswan Mitigation only Fix from $1,6002014-11-26 MEDIUM 5.0 CVE-2013-6466 Openswan 2.6.39 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon restart) via IKEv2 packets … Openswan after 2.6.39 Fix from $1,6002014-01-26 MEDIUM 6.8 CVE-2013-2053 Buffer overflow in the atodn function in Openswan before 2.6.39, when Opportunistic Encryption is enabled and an RSA key is being used, allows remote… Openswan after 2.6.38 Fix from $1,6002013-07-09 MEDIUM 5.0 CVE-2011-3380 Openswan 2.6.29 through 2.6.35 allows remote attackers to cause a denial of service (NULL pointer dereference and pluto IKE daemon crash) via an ISAK… Openswan Patch available Fix from $1,6002011-11-17 MEDIUM 6.5 CVE-2010-3753 programs/pluto/xauth.c in the client in Openswan 2.6.26 through 2.6.28 allows remote authenticated gateways to execute arbitrary commands via shell m… Openswan Patch available Fix from $1,6002010-10-05 MEDIUM 6.5 CVE-2010-3302 Buffer overflow in programs/pluto/xauth.c in the client in Openswan 2.6.25 through 2.6.28 might allow remote authenticated gateways to execute arbitr… Openswan Patch available Fix from $1,6002010-10-05 MEDIUM 6.5 CVE-2010-3308 Buffer overflow in programs/pluto/xauth.c in the client in Openswan 2.6.26 through 2.6.28 might allow remote authenticated gateways to execute arbitr… Openswan Patch available Fix from $1,6002010-10-05 MEDIUM 6.5 CVE-2010-3752 programs/pluto/xauth.c in the client in Openswan 2.6.25 through 2.6.28 allows remote authenticated gateways to execute arbitrary commands via shell m… Openswan Patch available Fix from $1,6002010-10-05