CVE-2014-2037

概要

参考情報

• openwall.com/lists/oss-security/2014/02/18/1
• openwall.com/lists/oss-security/2014/02/20/2
• securityfocus.com/bid/65629
• lists.openswan.org/pipermail/users/2014-February/022898.html · Vendor Advisory

openswan のその他の脆弱性

• CVE-2018-15836高 7.5In verify_signed_hash() in lib/liboswkeys/signatures.c in Openswan before 2.6.50.1, the RSA implementation does not verify the value of padd…
• CVE-2013-6466中 5.0Openswan 2.6.39 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon restart) via IKEv2…
• CVE-2013-2053中 6.8Buffer overflow in the atodn function in Openswan before 2.6.39, when Opportunistic Encryption is enabled and an RSA key is being used, allo…
• CVE-2011-4073中 4.0Use-after-free vulnerability in the cryptographic helper handler functionality in Openswan 2.3.0 through 2.6.36 allows remote authenticated …
• CVE-2011-3380中 5.0Openswan 2.6.29 through 2.6.35 allows remote attackers to cause a denial of service (NULL pointer dereference and pluto IKE daemon crash) vi…