CVEvulnerability
CVE-2011-4073
4.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2011-11-17
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:N/A:P
- Weaknesses
- CWE-399
Description
Use-after-free vulnerability in the cryptographic helper handler functionality in Openswan 2.3.0 through 2.6.36 allows remote authenticated users to cause a denial of service (pluto IKE daemon crash) via vectors related to the (1) quick_outI1_continue and (2) quick_outI1 functions.
Affected configurations
• xelerance openswan 2.3.0
• xelerance openswan 2.3.1
• xelerance openswan 2.4.0
• xelerance openswan 2.4.1
• xelerance openswan 2.4.2
• xelerance openswan 2.4.3
• xelerance openswan 2.4.4
• xelerance openswan 2.4.5
• xelerance openswan 2.4.6
• xelerance openswan 2.4.7
• xelerance openswan 2.4.8
• xelerance openswan 2.4.9
• xelerance openswan 2.4.10
• xelerance openswan 2.4.11
• xelerance openswan 2.4.12
• xelerance openswan 2.4.13
• xelerance openswan 2.5.0
• xelerance openswan 2.5.01
• xelerance openswan 2.5.02
• xelerance openswan 2.5.03
• xelerance openswan 2.5.04
• xelerance openswan 2.5.05
• xelerance openswan 2.5.06
• xelerance openswan 2.5.07
• xelerance openswan 2.5.08
• xelerance openswan 2.5.09
• xelerance openswan 2.5.10
• xelerance openswan 2.5.11
• xelerance openswan 2.5.12
• xelerance openswan 2.5.13
• xelerance openswan 2.5.14
• xelerance openswan 2.5.15
• xelerance openswan 2.5.16
• xelerance openswan 2.5.17
• xelerance openswan 2.5.18
• xelerance openswan 2.6.01
• xelerance openswan 2.6.02
• xelerance openswan 2.6.03
• xelerance openswan 2.6.04
• xelerance openswan 2.6.05
• xelerance openswan 2.6.06
• xelerance openswan 2.6.07
• xelerance openswan 2.6.08
• xelerance openswan 2.6.09
• xelerance openswan 2.6.10
• xelerance openswan 2.6.11
• xelerance openswan 2.6.12
• xelerance openswan 2.6.13
• xelerance openswan 2.6.14
• xelerance openswan 2.6.15
• xelerance openswan 2.6.16
• xelerance openswan 2.6.17
• xelerance openswan 2.6.18
• xelerance openswan 2.6.19
• xelerance openswan 2.6.20
• xelerance openswan 2.6.21
• xelerance openswan 2.6.22
• xelerance openswan 2.6.23
• xelerance openswan 2.6.24
• xelerance openswan 2.6.25
… and 11 more
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/46678 Vendor Advisory
- http://secunia.com/advisories/46681 Vendor Advisory
- http://secunia.com/advisories/47342 Vendor Advisory
- http://www.debian.org/security/2011/dsa-2374 www.debian.org
- http://www.openswan.org/download/CVE-2011-4073/CVE-2011-4073.txt www.openswan.org
- http://www.redhat.com/support/errata/RHSA-2011-1422.html www.redhat.com
- http://www.securityfocus.com/bid/50440 www.securityfocus.com
- http://www.securitytracker.com/id?1026268 www.securitytracker.com
- http://secunia.com/advisories/46678 Vendor Advisory
- http://secunia.com/advisories/46681 Vendor Advisory
- http://secunia.com/advisories/47342 Vendor Advisory
- http://www.debian.org/security/2011/dsa-2374 www.debian.org
- http://www.openswan.org/download/CVE-2011-4073/CVE-2011-4073.txt www.openswan.org
- http://www.redhat.com/support/errata/RHSA-2011-1422.html www.redhat.com
- http://www.securityfocus.com/bid/50440 www.securityfocus.com
- http://www.securitytracker.com/id?1026268 www.securitytracker.com