CVE-2014-2037

Description

References

• openwall.com/lists/oss-security/2014/02/18/1
• openwall.com/lists/oss-security/2014/02/20/2
• securityfocus.com/bid/65629
• lists.openswan.org/pipermail/users/2014-February/022898.html · Vendor Advisory

openswan 的其他漏洞

• CVE-2018-15836高危 7.5In verify_signed_hash() in lib/liboswkeys/signatures.c in Openswan before 2.6.50.1, the RSA implementation does not verify the value of padd…
• CVE-2013-6466中危 5.0Openswan 2.6.39 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon restart) via IKEv2…
• CVE-2013-2053中危 6.8Buffer overflow in the atodn function in Openswan before 2.6.39, when Opportunistic Encryption is enabled and an RSA key is being used, allo…
• CVE-2011-4073中危 4.0Use-after-free vulnerability in the cryptographic helper handler functionality in Openswan 2.3.0 through 2.6.36 allows remote authenticated …
• CVE-2011-3380中危 5.0Openswan 2.6.29 through 2.6.35 allows remote attackers to cause a denial of service (NULL pointer dereference and pluto IKE daemon crash) vi…