GCVE - cpe:2.3:a:xelerance:openswan:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:xelerance:openswan:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Xelerance (`525e7c38-2fbc-5dc3-b2b9-1a544b6bb3aa`)
Product	Openswan (`359ec948-e38a-5ff6-99fc-f02ff6f417bb`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/elerance/openswan`	purl2cpe	2026-06-01 10:16:12.783900

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2019-10155`	vulnerable	2026-06-08 05:12:22.352160	Details available LOW (3.1) The Libreswan Project has found a vulnerability in the processing of IKEv1 informational exchange packets which are encrypted and integrity protected using the established IKE SA encryption and integrity keys, but as a receiver, the integrity check value was not verified. This issue affects versions before 3.29. Published: 2019-06-12T13:51:01.000Z Updated: 2024-08-04T22:10:09.974Z Open on db.gcve.eu Reference links https://libreswan.org/security/CVE-2019-10155/ https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10155 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFGPGLLKAXSLWFI62A6BZHTZSCHRCBXS/ https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EUEXFCN7FAYBKJBQJLYCEUQUCHDEJRZW/ https://access.redhat.com/errata/RHSA-2019:3391	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-15836`	vulnerable	2026-06-08 05:11:03.650928	Details available In verify_signed_hash() in lib/liboswkeys/signatures.c in Openswan before 2.6.50.1, the RSA implementation does not verify the value of padding string during PKCS#1 v1.5 signature verification. Consequently, a remote attacker can forge signatures when small public exponents are being used. IKEv2 signature verification is affected when RAW RSA keys are used. Published: 2018-09-26T21:00:00.000Z Updated: 2024-08-05T10:01:54.675Z Open on db.gcve.eu Reference links https://lists.openswan.org/pipermail/users/2018-August/023761.html https://github.com/xelerance/Openswan/commit/9eaa6c2a823c1d2b58913506a15f9474bf857a3d https://github.com/xelerance/Openswan/commit/0b460be9e287fd335c8ce58129c67bf06065ef51	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-6466`	vulnerable	2026-06-08 05:04:56.988591	Details available Openswan 2.6.39 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon restart) via IKEv2 packets that lack expected payloads. Published: 2014-01-26T20:00:00.000Z Updated: 2024-08-06T17:39:01.444Z Open on db.gcve.eu Reference links https://libreswan.org/security/CVE-2013-6467/CVE-2013-6467.txt http://www.securityfocus.com/bid/65155 https://cert.vde.com/en-us/advisories/vde-2017-001 http://rhn.redhat.com/errata/RHSA-2014-0185.html http://www.debian.org/security/2014/dsa-2893	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-2053`	vulnerable	2026-06-08 05:03:58.059765	Details available Buffer overflow in the atodn function in Openswan before 2.6.39, when Opportunistic Encryption is enabled and an RSA key is being used, allows remote attackers to cause a denial of service (pluto IKE daemon crash) and possibly execute arbitrary code via crafted DNS TXT records. NOTE: this might be the same vulnerability as CVE-2013-2052 and CVE-2013-2054. Published: 2013-07-09T17:00:00.000Z Updated: 2024-08-06T15:20:37.420Z Open on db.gcve.eu Reference links https://www.openswan.org/news/13 http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00008.html http://rhn.redhat.com/errata/RHSA-2013-0827.html http://www.securityfocus.com/bid/59838 https://bugzilla.redhat.com/show_bug.cgi?id=960229	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Openswan

Notes

PURL mappings

Vulnerability references

Contribute