CVE-2011-4073
Fixed in a distro release EPSS 2%
Use-after-free vulnerability in the cryptographic helper handler functionality in Openswan 2.3.0 through 2.6.36 allows remote authenticated users to cause a denial of service (pluto IKE daemon crash) via vectors related to the (1) quick_outI1_continue and (2) quick_outI1 functions.
Products: xelerance openswan
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 5.0 | openswan | 1:2.4.12+dfsg-1.3+lenny4 |
| Debian 6.0 | openswan | 1:2.6.28+dfsg-5+squeeze1 |
| Red Hat Enterprise Linux 5 | openswan | 0:2.6.21-5.el5_7.6 |
| Red Hat Enterprise Linux 5 | openswan-debuginfo | 0:2.6.21-5.el5_7.6 |
| Red Hat Enterprise Linux 5 | openswan-doc | 0:2.6.21-5.el5_7.6 |
| Red Hat Enterprise Linux 6 | openswan | 0:2.6.32-4.el6_1.4 |
| Red Hat Enterprise Linux 6 | openswan-debuginfo | 0:2.6.32-4.el6_1.4 |
| Red Hat Enterprise Linux 6 | openswan-doc | 0:2.6.32-4.el6_1.4 |