| Package | Affected versions | Patched versions |
|---|---|---|
| openswan | = 2.3.0= 2.3.1= 2.4.0= 2.4.1= 2.4.10= 2.4.11= 2.4.12= 2.4.13= 2.4.2= 2.4.3= 2.4.4= 2.4.5= 2.4.6= 2.4.7= 2.4.8= 2.4.9= 2.5.0= 2.5.01= 2.5.02= 2.5.03= 2.5.04= 2.5.05= 2.5.06= 2.5.07= 2.5.08= 2.5.09= 2.5.10= 2.5.11= 2.5.12= 2.5.13= 2.5.14= 2.5.15= 2.5.16= 2.5.17= 2.5.18= 2.6.01= 2.6.02= 2.6.03= 2.6.04= 2.6.05= 2.6.06= 2.6.07= 2.6.08= 2.6.09= 2.6.10= 2.6.11= 2.6.12= 2.6.13= 2.6.14= 2.6.15= 2.6.16= 2.6.17= 2.6.18= 2.6.19= 2.6.20= 2.6.21= 2.6.22= 2.6.23= 2.6.24= 2.6.25= 2.6.26= 2.6.27= 2.6.28= 2.6.29= 2.6.30= 2.6.31= 2.6.32= 2.6.33= 2.6.34= 2.6.35= 2.6.36 |
Use-after-free vulnerability in the cryptographic helper handler functionality in Openswan 2.3.0 through 2.6.36 allows remote authenticated users to cause a denial of service (pluto IKE daemon crash) via vectors related to the (1) quick_outI1_continue and (2) quick_outI1 functions.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free