CVEvulnerability

CVE-2011-3380

5.0 MEDIUM Published 2011-11-17 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2011-11-17
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P

Description

Openswan 2.6.29 through 2.6.35 allows remote attackers to cause a denial of service (NULL pointer dereference and pluto IKE daemon crash) via an ISAKMP message with an invalid KEY_LENGTH attribute, which is not properly handled by the error handling function.

Affected configurations

• xelerance openswan 2.6.29 • xelerance openswan 2.6.30 • xelerance openswan 2.6.31 • xelerance openswan 2.6.32 • xelerance openswan 2.6.33 • xelerance openswan 2.6.34 • xelerance openswan 2.6.35

References