| Package | Affected versions | Patched versions |
|---|---|---|
| openswan | = 2.6.01= 2.6.02= 2.6.03= 2.6.04= 2.6.05= 2.6.06= 2.6.07= 2.6.08= 2.6.09= 2.6.10= 2.6.11= 2.6.12= 2.6.13= 2.6.14= 2.6.15= 2.6.16= 2.6.17= 2.6.18= 2.6.19= 2.6.20= 2.6.21= 2.6.22= 2.6.23= 2.6.24= 2.6.25= 2.6.26= 2.6.27= 2.6.28= 2.6.29= 2.6.30= 2.6.31= 2.6.32= 2.6.33= 2.6.34= 2.6.35= 2.6.36= 2.6.37≤ 2.6.38 |
Buffer overflow in the atodn function in Openswan before 2.6.39, when Opportunistic Encryption is enabled and an RSA key is being used, allows remote attackers to cause a denial of service (pluto IKE daemon crash) and possibly execute arbitrary code via crafted DNS TXT records. NOTE: this might be the same vulnerability as CVE-2013-2052 and CVE-2013-2054.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free