Vulnerability in Xelerance Openswan

CVE-2013-6466

Openswan 2.6.39 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon restart) via IKEv2 packets that lack expected payloads.

EPSS: 0.027 (84.2th percentile) — read the EPSS interpretation.

Affected products

Xelerance Openswan — versions 2.3.0, 2.3.1, 2.4.0
N/a — versions n/a

References

secalert@redhat.com (x_refsource_MISC, Vendor Advisory)
secalert@redhat.com (vdb-entry, x_refsource_BID)
secalert@redhat.com (x_refsource_CONFIRM)
secalert@redhat.com (x_refsource_REDHAT, vendor-advisory)
secalert@redhat.com (vendor-advisory, x_refsource_DEBIAN)
secalert@redhat.com (vdb-entry, x_refsource_XF)