Approved changes feed: RSS · Atom

cpe:2.3:a:openswan:openswan:2.2.1:*:*:*:*:*:*:*

part: a version: 2.2.1 update: *

VendorOpenswan (7a654ed7-1875-5eed-9b05-d3d9e3025fef)
ProductOpenswan (ca94c2c5-2c1d-5179-a154-da33418ce313)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/louisveblen/openswan purl2cpe 2026-06-01 10:17:47.789728
pkg:github/qianguozheng/openswan purl2cpe 2026-06-01 10:17:47.789730
pkg:github/xelerance/openswan purl2cpe 2026-06-01 10:17:47.789731
pkg:rpm/opensuse/openswan purl2cpe 2026-06-01 10:17:47.789733

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-2147 vulnerable 2026-06-08 04:58:04.385528 Details available
Openswan 2.2.x does not properly restrict permissions for (1) /var/run/starter.pid, related to starter.c in the IPsec starter, and (2) /var/lock/subsys/ipsec, which allows local users to kill arbitrary processes by writing a PID to a file, or possibly bypass disk quotas by writing arbitrary data to a file, as demonstrated by files with 0666 permissions, a different vulnerability than CVE-2011-1784.
Published: 2011-05-20T22:00:00.000Z
Updated: 2024-08-06T22:53:16.960Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.