GCVE - cpe:2.3:a:xelerance:openswan:2.6.34:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:xelerance:openswan:2.6.34:*:*:*:*:*:*:*

part: a version: 2.6.34 update: *

Vendor	Xelerance (`525e7c38-2fbc-5dc3-b2b9-1a544b6bb3aa`)
Product	Openswan (`359ec948-e38a-5ff6-99fc-f02ff6f417bb`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/elerance/openswan`	purl2cpe	2026-06-01 10:16:12.797115

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2013-6466`	vulnerable	2026-06-08 05:04:57.026316	Details available Openswan 2.6.39 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon restart) via IKEv2 packets that lack expected payloads. Published: 2014-01-26T20:00:00.000Z Updated: 2024-08-06T17:39:01.444Z Open on db.gcve.eu Reference links https://libreswan.org/security/CVE-2013-6467/CVE-2013-6467.txt http://www.securityfocus.com/bid/65155 https://cert.vde.com/en-us/advisories/vde-2017-001 http://rhn.redhat.com/errata/RHSA-2014-0185.html http://www.debian.org/security/2014/dsa-2893	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-2053`	vulnerable	2026-06-08 05:03:58.077496	Details available Buffer overflow in the atodn function in Openswan before 2.6.39, when Opportunistic Encryption is enabled and an RSA key is being used, allows remote attackers to cause a denial of service (pluto IKE daemon crash) and possibly execute arbitrary code via crafted DNS TXT records. NOTE: this might be the same vulnerability as CVE-2013-2052 and CVE-2013-2054. Published: 2013-07-09T17:00:00.000Z Updated: 2024-08-06T15:20:37.420Z Open on db.gcve.eu Reference links https://www.openswan.org/news/13 http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00008.html http://rhn.redhat.com/errata/RHSA-2013-0827.html http://www.securityfocus.com/bid/59838 https://bugzilla.redhat.com/show_bug.cgi?id=960229	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-4073`	vulnerable	2026-06-08 04:59:28.961623	Details available Use-after-free vulnerability in the cryptographic helper handler functionality in Openswan 2.3.0 through 2.6.36 allows remote authenticated users to cause a denial of service (pluto IKE daemon crash) via vectors related to the (1) quick_outI1_continue and (2) quick_outI1 functions. Published: 2011-11-17T19:00:00.000Z Updated: 2024-08-06T23:53:32.636Z Open on db.gcve.eu Reference links http://secunia.com/advisories/47342 http://www.securityfocus.com/bid/50440 http://www.debian.org/security/2011/dsa-2374 http://secunia.com/advisories/46678 http://www.openswan.org/download/CVE-2011-4073/CVE-2011-4073.txt	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-3380`	vulnerable	2026-06-08 04:59:25.192294	Details available Openswan 2.6.29 through 2.6.35 allows remote attackers to cause a denial of service (NULL pointer dereference and pluto IKE daemon crash) via an ISAKMP message with an invalid KEY_LENGTH attribute, which is not properly handled by the error handling function. Published: 2011-11-17T19:00:00.000Z Updated: 2024-08-06T23:29:56.695Z Open on db.gcve.eu Reference links http://www.openswan.org/download/CVE-2011-3380/CVE-2011-3380.txt http://secunia.com/advisories/46306 http://www.redhat.com/support/errata/RHSA-2011-1356.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Xelerance Openswan 2.6.34

Notes

PURL mappings

Vulnerability references

Contribute