Vulnerability index

Browse CVEs

9 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Openswan HIGH 7.5
CVE-2018-15836

In verify_signed_hash() in lib/liboswkeys/signatures.c in Openswan before 2.6.50.1, the RSA implementation does not verify the value of padding strin…

Fix: 2.6.50.1+
Fix from $1,950 2018-09-26
Openswan MEDIUM 5.0
CVE-2014-2037

Openswan 2.6.40 allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon restart) via IKEv2 packets that lack ex…

Mitigation only
Fix from $1,600 2014-11-26
Openswan MEDIUM 5.0
CVE-2013-6466

Openswan 2.6.39 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon restart) via IKEv2 packets …

Fix: after 2.6.39
Fix from $1,600 2014-01-26
Openswan MEDIUM 6.8
CVE-2013-2053

Buffer overflow in the atodn function in Openswan before 2.6.39, when Opportunistic Encryption is enabled and an RSA key is being used, allows remote…

Fix: after 2.6.38
Fix from $1,600 2013-07-09
Openswan MEDIUM 5.0
CVE-2011-3380

Openswan 2.6.29 through 2.6.35 allows remote attackers to cause a denial of service (NULL pointer dereference and pluto IKE daemon crash) via an ISAK…

Patch available
Fix from $1,600 2011-11-17
Openswan MEDIUM 6.5
CVE-2010-3753

programs/pluto/xauth.c in the client in Openswan 2.6.26 through 2.6.28 allows remote authenticated gateways to execute arbitrary commands via shell m…

Patch available
Fix from $1,600 2010-10-05
Openswan MEDIUM 6.5
CVE-2010-3302

Buffer overflow in programs/pluto/xauth.c in the client in Openswan 2.6.25 through 2.6.28 might allow remote authenticated gateways to execute arbitr…

Patch available
Fix from $1,600 2010-10-05
Openswan MEDIUM 6.5
CVE-2010-3308

Buffer overflow in programs/pluto/xauth.c in the client in Openswan 2.6.26 through 2.6.28 might allow remote authenticated gateways to execute arbitr…

Patch available
Fix from $1,600 2010-10-05
Openswan MEDIUM 6.5
CVE-2010-3752

programs/pluto/xauth.c in the client in Openswan 2.6.25 through 2.6.28 allows remote authenticated gateways to execute arbitrary commands via shell m…

Patch available
Fix from $1,600 2010-10-05