CVE-2010-3308

概要

参考情報

• lists.fedoraproject.org/pipermail/package-announce/2010-October/048999.html
• lists.fedoraproject.org/pipermail/package-announce/2010-October/049053.html
• lists.fedoraproject.org/pipermail/package-announce/2010-October/049073.html
• secunia.com/advisories/41769
• openswan.org/download/CVE-2010-3308/CVE-2010-3308.txt · Vendor Advisory
• openswan.org/download/CVE-2010-3308/openswan-2.6.26-2.6.28-CVE-2010-330x.patch · Patch
• redhat.com/support/errata/RHSA-2010-0892.html
• securityfocus.com/bid/43588
• securitytracker.com/id
• vupen.com/english/advisories/2010/2526 · Vendor Advisory

openswan のその他の脆弱性

• CVE-2018-15836高 7.5In verify_signed_hash() in lib/liboswkeys/signatures.c in Openswan before 2.6.50.1, the RSA implementation does not verify the value of padd…
• CVE-2014-2037中 5.0Openswan 2.6.40 allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon restart) via IKEv2 packets tha…
• CVE-2013-6466中 5.0Openswan 2.6.39 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon restart) via IKEv2…
• CVE-2013-2053中 6.8Buffer overflow in the atodn function in Openswan before 2.6.39, when Opportunistic Encryption is enabled and an RSA key is being used, allo…
• CVE-2011-4073中 4.0Use-after-free vulnerability in the cryptographic helper handler functionality in Openswan 2.3.0 through 2.6.36 allows remote authenticated …