Approved changes feed: RSS · Atom

cpe:2.3:a:openswan:openswan:2.1.6:*:*:*:*:*:*:*

part: a version: 2.1.6 update: *

VendorOpenswan (7a654ed7-1875-5eed-9b05-d3d9e3025fef)
ProductOpenswan (ca94c2c5-2c1d-5179-a154-da33418ce313)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/louisveblen/openswan purl2cpe 2026-06-01 10:17:47.785396
pkg:github/qianguozheng/openswan purl2cpe 2026-06-01 10:17:47.785398
pkg:github/xelerance/openswan purl2cpe 2026-06-01 10:17:47.785400
pkg:rpm/opensuse/openswan purl2cpe 2026-06-01 10:17:47.785401

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-4190 vulnerable 2026-06-08 04:50:38.152222 Details available
The IPSEC livetest tool in Openswan 2.4.12 and earlier, and 2.6.x through 2.6.16, allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack on the (1) ipseclive.conn and (2) ipsec.olts.remote.log temporary files. NOTE: in many distributions and the upstream version, this tool has been disabled.
Published: 2008-09-24T10:00:00.000Z
Updated: 2024-08-07T10:08:34.945Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-3671 vulnerable 2026-06-08 04:48:41.779979 Details available
The Internet Key Exchange version 1 (IKEv1) implementation in Openswan 2 (openswan-2) before 2.4.4, and freeswan in SUSE LINUX 9.1 before 2.04_1.5.4-1.23, allow remote attackers to cause a denial of service via (1) a crafted packet using 3DES with an invalid key length, or (2) unspecified inputs when Aggressive Mode is enabled and the PSK is known, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.
Published: 2005-11-18T21:00:00.000Z
Updated: 2024-08-07T23:17:23.402Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.