Xelerance Openswan 2.6.27
Approved changes feed: RSS · Atom
cpe:2.3:a:xelerance:openswan:2.6.27:*:*:*:*:*:*:*part: a version: 2.6.27 update: *
| Vendor | Xelerance (525e7c38-2fbc-5dc3-b2b9-1a544b6bb3aa) |
|---|---|
| Product | Openswan (359ec948-e38a-5ff6-99fc-f02ff6f417bb) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/elerance/openswan |
purl2cpe | 2026-06-01 10:16:12.783993 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2013-6466 |
vulnerable | 2026-06-08 05:04:57.022618 |
Details available
Openswan 2.6.39 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon restart) via IKEv2 packets that lack expected payloads.
Published: 2014-01-26T20:00:00.000Z
Updated: 2024-08-06T17:39:01.444Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-2053 |
vulnerable | 2026-06-08 05:03:58.073694 |
Details available
Buffer overflow in the atodn function in Openswan before 2.6.39, when Opportunistic Encryption is enabled and an RSA key is being used, allows remote attackers to cause a denial of service (pluto IKE daemon crash) and possibly execute arbitrary code via crafted DNS TXT records. NOTE: this might be the same vulnerability as CVE-2013-2052 and CVE-2013-2054.
Published: 2013-07-09T17:00:00.000Z
Updated: 2024-08-06T15:20:37.420Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-4073 |
vulnerable | 2026-06-08 04:59:28.961007 |
Details available
Use-after-free vulnerability in the cryptographic helper handler functionality in Openswan 2.3.0 through 2.6.36 allows remote authenticated users to cause a denial of service (pluto IKE daemon crash) via vectors related to the (1) quick_outI1_continue and (2) quick_outI1 functions.
Published: 2011-11-17T19:00:00.000Z
Updated: 2024-08-06T23:53:32.636Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-3753 |
vulnerable | 2026-06-08 04:55:16.662103 |
Details available
programs/pluto/xauth.c in the client in Openswan 2.6.26 through 2.6.28 allows remote authenticated gateways to execute arbitrary commands via shell metacharacters in the cisco_banner (aka server_banner) field, a different vulnerability than CVE-2010-3308.
Published: 2010-10-05T21:00:00.000Z
Updated: 2024-08-07T03:18:53.060Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-3752 |
vulnerable | 2026-06-08 04:55:16.661719 |
Details available
programs/pluto/xauth.c in the client in Openswan 2.6.25 through 2.6.28 allows remote authenticated gateways to execute arbitrary commands via shell metacharacters in (1) cisco_dns_info or (2) cisco_domain_info data in a packet, a different vulnerability than CVE-2010-3302.
Published: 2010-10-05T21:00:00.000Z
Updated: 2024-08-07T03:18:53.149Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-3308 |
vulnerable | 2026-06-08 04:55:14.099098 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-3302 |
vulnerable | 2026-06-08 04:55:14.069001 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.