PatchTheCVEfrees wan vulnerabilities and fixes
Recent CVEs affecting frees wan, with upgrade or downgrade steps. 3 tracked.
Also searched as: freeswan.
frees wan has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2005-11-18. Highest priority: CVE-2004-0590 (score 57/100).
- CVE-2005-3671 HIGH 7.8 DOWNGRADE DOWNGRADE The Internet Key Exchange version 1 (IKEv1) implementation in Openswan 2 (openswan-2) before 2.4.4, and freesw
- CVE-2004-0590 HIGH 10.0 DOWNGRADE DOWNGRADE FreeS/WAN 1.x and 2.x, and other related products including superfreeswan 1.x, openswan 1.x before 1.0.6, open
- CVE-2002-0666 MEDIUM 5.0 DOWNGRADE MITIGATE IPSEC implementations including (1) FreeS/WAN and (2) KAME do not properly calculate the length of authenticat
FAQ
How do I fix frees wan vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is frees wan being exploited right now?
None of the tracked frees wan CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which frees wan CVE should I patch first?
CVE-2004-0590 currently ranks highest (57/100): FreeS/WAN 1.x and 2.x, and other related products including superfreeswan 1.x, openswan 1.x before 1.0.6, open.