CVE-2011-3380 | BDVDB-2026-48217 Detail

Description#

Openswan 2.6.29 through 2.6.35 allows remote attackers to cause a denial of service (NULL pointer dereference and pluto IKE daemon crash) via an ISAKMP message with an invalid KEY_LENGTH attribute, which is not properly handled by the error handling function.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.openswan.org/download/CVE-2011-3380/CVE-2011-3380.txt
http://secunia.com/advisories/46306
http://www.redhat.com/support/errata/RHSA-2011-1356.html

Exploit#

No public exploit known

History#

Version 12011-11-17Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.