| Package | Affected versions | Patched versions |
|---|---|---|
| openswan | = 2.6.29= 2.6.30= 2.6.31= 2.6.32= 2.6.33= 2.6.34= 2.6.35 |
Openswan 2.6.29 through 2.6.35 allows remote attackers to cause a denial of service (NULL pointer dereference and pluto IKE daemon crash) via an ISAKMP message with an invalid KEY_LENGTH attribute, which is not properly handled by the error handling function.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free