1. CVE-Search
  2. CVE-2011-3380
ID CVE-2011-3380
Summary Openswan 2.6.29 through 2.6.35 allows remote attackers to cause a denial of service (NULL pointer dereference and pluto IKE daemon crash) via an ISAKMP message with an invalid KEY_LENGTH attribute, which is not properly handled by the error handling function. Per: http://cwe.mitre.org/data/definitions/476.html 'CWE-476: NULL Pointer Dereference'
References
Vulnerable Configurations
  • cpe:2.3:a:xelerance:openswan:2.6.29:*:*:*:*:*:*:*
    cpe:2.3:a:xelerance:openswan:2.6.29:*:*:*:*:*:*:*
  • cpe:2.3:a:xelerance:openswan:2.6.30:*:*:*:*:*:*:*
    cpe:2.3:a:xelerance:openswan:2.6.30:*:*:*:*:*:*:*
  • cpe:2.3:a:xelerance:openswan:2.6.31:*:*:*:*:*:*:*
    cpe:2.3:a:xelerance:openswan:2.6.31:*:*:*:*:*:*:*
  • cpe:2.3:a:xelerance:openswan:2.6.32:*:*:*:*:*:*:*
    cpe:2.3:a:xelerance:openswan:2.6.32:*:*:*:*:*:*:*
  • cpe:2.3:a:xelerance:openswan:2.6.33:*:*:*:*:*:*:*
    cpe:2.3:a:xelerance:openswan:2.6.33:*:*:*:*:*:*:*
  • cpe:2.3:a:xelerance:openswan:2.6.34:*:*:*:*:*:*:*
    cpe:2.3:a:xelerance:openswan:2.6.34:*:*:*:*:*:*:*
  • cpe:2.3:a:xelerance:openswan:2.6.35:*:*:*:*:*:*:*
    cpe:2.3:a:xelerance:openswan:2.6.35:*:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 29-07-2019 - 13:26)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:P
redhat via4
advisories
bugzilla
id 742065
title CVE-2011-3380 openswan: IKE invalid key length allows remote unauthenticated user to crash openswan
oval
OR
  • comment Red Hat Enterprise Linux must be installed
    oval oval:com.redhat.rhba:tst:20070304026
  • AND
    • comment Red Hat Enterprise Linux 6 is installed
      oval oval:com.redhat.rhba:tst:20111656003
    • OR
      • AND
        • comment openswan is earlier than 0:2.6.32-4.el6_1.2
          oval oval:com.redhat.rhsa:tst:20111356001
        • comment openswan is signed with Red Hat redhatrelease2 key
          oval oval:com.redhat.rhsa:tst:20100892002
      • AND
        • comment openswan-doc is earlier than 0:2.6.32-4.el6_1.2
          oval oval:com.redhat.rhsa:tst:20111356003
        • comment openswan-doc is signed with Red Hat redhatrelease2 key
          oval oval:com.redhat.rhsa:tst:20100892004
rhsa
id RHSA-2011:1356
released 2011-10-05
severity Moderate
title RHSA-2011:1356: openswan security update (Moderate)
rpms
  • openswan-0:2.6.32-4.el6_1.2
  • openswan-debuginfo-0:2.6.32-4.el6_1.2
  • openswan-doc-0:2.6.32-4.el6_1.2
refmap via4
confirm http://www.openswan.org/download/CVE-2011-3380/CVE-2011-3380.txt
secunia 46306
Last major update 29-07-2019 - 13:26
Published 17-11-2011 - 19:55
Last modified 29-07-2019 - 13:26
Back to Top